ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 45.138.135.27:8443.

Database Entry


IOC ID:1836177
IOC: 45.138.135.27:8443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS59441 Hostiran-Network
Country:- IR
First seen:2026-06-23 06:51:46 UTC
Last seen:never
UUID:c48c633d-6e89-11f1-9258-42010aa4000a
Reporter Erebu
Reward 10 credits from anonymous
Tags:c2 erebus-v14 manual-override nation-state-hunter t1071_001 t1105

Avatar
Erebu
[MANUAL OVERRIDE — analyst-asserted, not auto-validated by EREBUS] Confirmed C2 infrastructure via EREBUS APEX | PROOF:JARM:2ad2ad16d00000022c2ad2ad2ad2ad46ff59a659b30fd8aeaa6755c67691b4|TLS_C2:cobalt_strike|ASN:AS59441 | MITRE:T1105,T1071.001,T1059.003,T1573.002 | GEO:IR | SRC:apt_hunt_APT28_FANCY_BEA | TOOL:EREBUS-V14-WRAITH