Locky C2 ::

Host Information

Locky C2:
Host Status:offline
Firstseen (UTC):2016-09-07 08:36:42
Lastseen (UTC):2017-06-12 10:33:50

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky C2. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2016-09-20 11:49:572017-07-12 23:58:33185.162.8.101hosting.eurohoster.orgNot listedAS21100ITLDC-NL, UA- Netherlands (NL)

# IPs found: 1 (max. 25)

Referencing malware samples

Latest 100 malware binaries referencing this Locky C2:

Firstseen (UTC)MD5 hashFilesizeVTLocky C2 URL
2017-06-08 22:01:41002e1cd50be9495a99c3d3ab691fadfd326'144 bytesVirustotal results 41/59 (69.49%)
2016-12-10 19:37:03a68d717b54d242867e719645d6c5619f157'184 bytesVirustotal results 41/57 (71.93%)
2016-12-10 18:46:40a20e54a1678f9ac2e063d7239cd1ea9f157'184 bytesVirustotal results 43/57 (75.44%)
2016-09-09 22:10:47810c011911151d3e8a064ad44a600421280'087 bytesVirustotal results 33/56 (58.93%)
2016-09-09 14:47:09141003376cd3d8725434d94805724c0d151'552 bytesn/ahttp://
2016-09-09 14:47:0610bdf784fd1f36aa72100aa90da22d8a20'480 bytesn/ahttp://
2016-09-09 14:46:5705f96e4199d83caa6f5e189016215e45151'552 bytesVirustotal results 18/58 (31.03%)
2016-09-08 18:44:491c537d39e2c0a3fd563b63d1f2a52469250'573 bytesVirustotal results 33/58 (56.90%)
2016-09-07 06:14:135db4291dbd864c120a924115070e8a42157'184 bytesn/ahttp://
2016-09-06 18:49:41c940cfac2d71f53546a118c0dc96175c238'588 bytesVirustotal results 6/55 (10.91%)

Referencing malware samples: 10