ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 144.172.91.41:8805.

Database Entry


IOC ID:1552731
IOC: 144.172.91.41:8805
IOC Type :ip:port
Threat Type :botnet_cc
Malware: PureLogs Stealer
Confidence Level : Confidence level is moderate (50%)
ASN:AS14956 ROUTERHOSTING
Country:- US
First seen:2025-07-02 13:12:37 UTC
Last seen:2025-07-15 10:21:29 UTC
UUID:56c60515-5745-11f0-a7f6-42010aa4000a
Reporter netresec
Reward 5 credits from ThreatFox

Avatar
netresec
Malicious protocol PureLogs

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-07-07 03:35:58 ee0686e6aa8f21350df1fd7341e8e384b00f7cd34390b4c3ddba2ad583d83314
2025-07-07 01:25:52 b30ed6206174bdd6de70f975ebf05ecdded2a3bd5efac6fca016d0e3c31400cd
2025-07-06 22:50:57 40bdbdf488ec579454f6d6302fff5e424c8ff86a3e04d478305c4b262cffcd2f
2025-07-06 18:07:17 bf2d841222e588227208ac536282890205ee2d8a9528390c3254eee42581d717
2025-07-06 17:41:20 4326cdbae0a4b8d8fc9a8c6fd24557dbc0d6407299eb8e6600ed4075e5b29ddd
2025-07-06 17:16:18 9cfe8a34e954671eeafb9da5ce51699cbbd1f6adb05b35ffc60c65cf04730ef2
2025-07-06 17:16:14 541fb79b585164a9b4dc7cff4b9cafb93848e8bec0a3d933a1b260bc9c270b51
2025-07-06 16:51:01 f78350a46008d3d38bccfa97388fa65edf72f7b937783fe0e9aeafb2cd37629b
2025-07-06 16:06:19 85f04d9bf7440fa3611f62f2322ee36d2dc625fd46c91316da75bc067c66fd42
2025-07-06 14:15:33 35ec950215ab50445813e2babef90dafe6c2f7e6dd4e8a70418cb48ab61358ea