ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.45.78.74:443.

Database Entry


IOC ID:1263215
IOC: 147.45.78.74:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: FAKEUPDATES
Malware alias:FakeUpdate, GhoLoader, SocGholish
Confidence Level : Confidence level is moderate (50%)
ASN:AS210644 AEZA-AS
Country:- RU
First seen:2024-04-28 06:50:51 UTC
Last seen:never
UUID:a7241fb1-052b-11ef-a571-42010aa4000a
Reporter drb_ra
Reward 5 credits from ThreatFox
Tags:AEZA-AS SocGholish
Reference: https://search.censys.io/hosts/147.45.78.74

Avatar
drb_ra
SocGholish Found
C2: 147[.]45[.]78[.]74:443
Certificate: 1768933977fb17c50b0f4f2126eb0ae092dac5764b70d2f5ff881efe440cf139
Country: United States
ASN: AEZA-AS