Locky C2 ::

Host Information

Locky C2:
Host Status:offline
Firstseen (UTC):2016-10-23 10:05:57
Lastseen (UTC):2016-10-25 01:08:12

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky C2. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2016-10-24 07:23:002016-11-24 19:01:55185.102.136.77a13.newalluringoffer4u.comNot listedAS43146AGAVA3 , RU- Russian Federation (RU)

# IPs found: 1 (max. 25)

Referencing malware samples

Latest 100 malware binaries referencing this Locky C2:

Firstseen (UTC)MD5 hashFilesizeVTLocky C2 URL
2016-10-24 19:08:09f08c3b7ace25f1ce76bebd3429762ef8211'452 bytesVirustotal results 16/56 (28.57%)
2016-10-24 18:19:53264f16260d200d0501cf83220ed9a30a191'036 bytesVirustotal results 6/57 (10.53%)
2016-10-24 17:59:175695803a695e1dc6443ea09572e6b14c238'026 bytesVirustotal results 4/57 (7.02%)
2016-10-24 04:59:10ba5a6500cfba0e674f8bd2a62a308ae5228'352 bytesVirustotal results 26/57 (45.61%)
2016-10-23 00:34:4363b695765260d6d1d2a5e5fb88130dfd263'573 bytesVirustotal results 2/56 (3.57%)
2016-10-23 00:21:093258e4be68770b76315a5059a0cb3199271'367 bytesVirustotal results 33/57 (57.89%)
2016-10-23 00:15:091fa1023e66b05db04d22ed4f57d37651226'304 bytesVirustotal results 9/56 (16.07%)
2016-10-22 23:56:07baaaefc5706911cd0a797808e23544ae230'181 bytesVirustotal results 25/56 (44.64%)

Referencing malware samples: 8