ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.31:49654.

Database Entry

This IOC expired

This IOC is an old IOC and hence has expired on 2026-09-13 01:15:01 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.

IOC ID:	1583376
IOC:	147.185.221.31:49654
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	XWorm
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS400519 PLAYIT-GG
Country:	US
First seen:	2025-09-07 15:25:24 UTC
Last seen:	never
UUID:	e010bbab-8bfe-11f0-bfa6-42010aa4000a
Reporter	abuse_ch
Reward	50 credits from anonymous 10 credits from netresec 10 credits from akanine1337 10 credits from Saber
Tags:	XWorm

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)	SHA256 hash	Bazaar
2025-09-08 14:25:50	57c36a59f7e1d7291d870b05e637f417a37124f1001ff365a2d297c382ab117d
2025-09-08 14:21:05	9e9266316d580cd57a595eab55d859b9b52f2b3389d89ab33af75389647ddc31
2025-09-08 12:55:35	70f98c780ac0727782c90db5c46f60f72e0b345c805d041b85fc1de05bb57342
2025-09-08 12:20:41	42cafebbe1f631ba75159764085d8f42e91c5f0a61dd16db57ed59e5400679be
2025-09-08 11:30:44	77eaefce1014dd8caa3109529cd8d51b3bc3078964c948f92dd19c2bdca15050
2025-09-08 11:10:34	1504abbdecc7d90090ef7f86836394020d4bca41f25d89516b56ff125f8d2d29
2025-09-08 10:55:32	a94f5465d7bec56fdf4ef8637b5b53665756347df5dff3510b4f36c3da7ba37b
2025-09-08 09:40:33	48c07e5d17fec5de4a2fbb9a79de4bb739bf3284ecd7a561eb0d60a711328c43
2025-09-08 09:10:34	6754a947359c7dcfc0bfe8790b7125079774afd0c874301907d5ac6b8d9bb800
2025-09-08 09:00:39	08e8c7bb98c2228683d03097a5997563bf663762072da11b5cd656d46626003a
2025-09-08 07:50:32	cbb7c528b8478cf511df61bbba21abb37ec54b569e8a4ffe92579bd7f8d38ae5
2025-09-08 05:05:32	10840ac8c3cdbdf4e6ff0a3887d2dfc1b92f6718a0d8c3619bffea5f6d406695
2025-09-08 05:05:30	62d97f260244cbe1ec88444bb23c7665b22c027fb7bf48cdff45d8a727d5349c
2025-09-08 04:25:44	9feb9ec3d5a0801f2399a8556aa4fc6cb1be1ba13af8f877c70d6e94d2cbb84d
2025-09-08 04:15:32	7d66c0282adce639b78bb70a41b12341c1d97d3f28238fbcd7efc300159fd017
2025-09-08 04:15:29	eb8b2de88db4415ac6b555ec6c0fe0d47c3a2d527db4ef8cd47598426f3f1fd9
2025-09-08 04:00:37	058a35af579876771d21c30b88f5139871f3c693f068b933422ac49a7f8e3a51
2025-09-07 17:25:32	6d0875865d80752d7937fc320f0cdb5091840bdfeeec4ccf9d772fd73cb502ae
2025-09-07 17:25:30	a42cb3fb3abf5df706c6f8c8fa590aa5bd76f98f328bf602037bb9208e580d98
2025-09-07 17:05:30	bee6b54ab1e1302a7c9e48d41fb233e3d6f2ab0c421254eedb19a0101cf3b1fc
2025-09-07 17:00:51	eec619b31c20b98b265f97f8ed2b8ece9fa819237a80d19a6504f7f7b247c500
2025-09-07 16:55:34	f0c7abace7a08682b20600772af5ae42dc227b2beae496019db15936977727cf
2025-09-07 16:55:30	89c42dfbb05f7be8162e2db485ff2d70faed81989a73de3f01499446946c67ac
2025-09-07 16:50:34	c2ce72cbf440aba51ccc9d13041115d7738c6daa4875ff9ca5a732804ebcfb65
2025-09-07 16:50:29	0d64857444ac3bef48601ae41ffc4bc495a2827a5357b37d8ac8632e06194550
2025-09-07 16:40:27	0198cd73b3f21c219ac0e91f15f2ef445127bf7d646e47a07a29961f750755bf
2025-09-07 16:35:28	8f02c0fd6dad12e2beebf1b67896e5d2ba6079628ebe4de17c746f8eb7971223
2025-09-07 16:30:31	80d931d6ce4b435d4d3486d0330733777d82d0ec15966bfa4f4acf8ffc76a449
2025-09-07 16:30:29	110c9d91b85e5d92db03708c2c56d5978627238c86ed7b6728b911cdd628d6a6
2025-09-07 16:20:32	898dd28e3c6ea2bbf2a3274bdc8a5d76e60f8c68eb1a16749090c8273fe3264f
2025-09-07 16:05:29	629a5d51b57d61081e5e86045a36e1aec071f9fb48d306108f1a0fdfc88421e0
2025-09-07 16:05:27	b0f3e4ec9b502acb2cb05ba9427d74e5368e0d2600540a1b8eb639e8caf15fe8
2025-09-07 16:05:24	c17f70ddf13fa4eb68f0b3991b2721b5cc82d69085d95a199f1fd30b1a2613a0
2025-09-07 15:40:28	0ddf063be266344c7dbad9d43d5a9f5e29497a24f41ddaa88f2bdaeadc4b571d
2025-09-07 15:40:26	a95536980e65e1af4146ab9efc02145ef24b3efe4935d6b65a5c4631ab77b77c
2025-09-07 15:25:26	3254e767805e57450103750a59ec5d006d2c69ed24fa15a98e1ac0d6537f5134