ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 196.251.117.50:5213.

Database Entry


IOC ID:1518438
IOC: 196.251.117.50:5213
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Ave Maria
Malware alias:AVE_MARIA, AveMariaRAT, Warzone RAT, WarzoneRAT, avemaria
Confidence Level : Confidence level is high (100%)
ASN:AS401116 NYBULA
Country:- US
First seen:2025-05-08 15:05:10 UTC
Last seen:never
UUID:d5ea9ab2-2c1d-11f0-90ee-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AveMariaRAT RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-05-09 12:45:20 93ddcee5487885a9825538b723ba30214b827617f85aef5558d232545171e8f6
2025-05-09 12:45:14 f19253d1e2423e2613b27354b1d8670fc63ffbb2d194ebf00e2323f712141648
2025-05-09 12:15:08 614f6326a378a9c583fc7de320ea6a60a78706283ec087afcb349ca75c083807
2025-05-09 11:50:07 c90e5c5f118bfc7417e1a43d8ec7a1d6e91a730f336a47799b81f16a0fd6d69c
2025-05-08 15:10:14 cd4b8eb7fa51767c3cc1942e3523e99026062f95dfcb0428033dd7b706db8481