ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 178.20.42.11:80.

Database Entry


IOC ID:162206
IOC: 178.20.42.11:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS48282 VDSINA-AS
Country:- RU
First seen:2021-07-22 22:41:05 UTC
Last seen:never
UUID:e644298c-eb3d-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-07-23 15:30:27 21aad53d28c5415465bef9cd7b36d0d4708f22b57d77f7d6aca5e2de371c1bb5
2021-07-23 12:15:47 1c5088ac5461153a35eaf852a6fee84df1a6e32277426844c0cc5593ed6670b4
2021-07-23 07:46:14 844131e4d854e4963f3e742809946adb7d3644409a819cce010415d611f2a174
2021-07-23 03:56:21 08c672cbfc638f1cde4a502afb6b0b907b0a665a6b487a9552cbf48abcb516a1
2021-07-22 23:46:03 36ae4637dfb47d17615a49a16a8eadeb29eb5ad5357ae86bad683402a4b0993d