ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 160.191.237.196:1016.

Database Entry


IOC ID:1660965
IOC: 160.191.237.196:1016
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS135918 DVS-AS-VN
Country:- VN
First seen:2025-11-29 09:38:15 UTC
Last seen:2025-12-12 18:39:37 UTC
UUID:20fea2eb-cd07-11f0-a341-42010aa4000a
Reporter DonPasci
Reward 10 credits from akanine1337
10 credits from Saber
Tags:AS135918 c2 DVS-AS-VN XWorm
Reference: https://x.com/K_N1kolenko/status/1994372549787124038

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-12-08 16:55:11 20314d83a7ca048d0ff425c664deaac72fb18ae6a29c465ab2ed24c6abf4c96d