ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 103.231.14.104:4333.

Database Entry


IOC ID:1668957
IOC: 103.231.14.104:4333
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ValleyRAT
Malware alias:Winos
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS55933 CLOUDIE-AS-AP
Country:- HK
First seen:2025-12-07 14:35:07 UTC
Last seen:2025-12-28 15:56:47 UTC
UUID:ed6fd8b3-d379-11f0-a341-42010aa4000a
Reporter abuse_ch
Reward 10 credits from netresec
Tags:RAT ValleyRAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-12-07 14:45:11 fd847af5c72b79c418e9ecf07caaba41c25d92f5550521a56b4abf2e20036f9b
2025-12-07 14:35:10 5ce5e65e6fbc7a066747c1a46095a0bcf91938c30565d7dae13c90f50a3b226e