ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 51.68.244.175:4782.

Database Entry


IOC ID:1568730
IOC: 51.68.244.175:4782
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Quasar RAT
Malware alias:CinaRAT, QuasarRAT, Yggdrasil
Confidence Level : Confidence level is high (100%)
ASN:AS16276 OVH
Country:- FR
First seen:2025-08-15 06:02:02 UTC
Last seen:2025-09-13 11:43:26 UTC
UUID:5cd9550b-799d-11f0-b2c6-42010aa4000a
Reporter DonPasci
Reward 10 credits from netresec
Tags:AS16276 c2 quasar RAT triage
Reference: https://tria.ge/250815-f7se1st1bw

Avatar
DonPasci
Office04

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-15 06:45:07 6bc633b4640d3f96e0604c3d8a9168595a07df77a1ac55f7ac0824600a470e24
2025-08-15 06:35:07 5ad9c90d12ca1702027f6e53994d8cd4130d1e5c34865d0b235ef9810f663eeb