ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 108.187.7.143:447.

Database Entry


IOC ID:1636023
IOC: 108.187.7.143:447
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ValleyRAT
Malware alias:Winos
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS138995 ANTBOX1-AS-AP
Country:- HK
First seen:2025-11-07 17:40:12 UTC
Last seen:never
UUID:d04d6267-bc00-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 10 credits from netresec
Tags:RAT ValleyRAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-11-07 18:20:15 b6376310755d16c8851f17f12b897b4d97a9243d2c9a23147dc88221ae044c2c
2025-11-07 18:00:34 5e6a838682d323eb21425fcbf81e40767b0e63cb53622eec56468f389902ba81
2025-11-07 17:40:16 fefa640efcb181ede0f59c963719648d0904be2d2e45d9c9ef7d381e50592cea