ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 108.181.175.198:6606.

Database Entry


IOC ID:1881334
IOC: 108.181.175.198:6606
IOC Type :ip:port
Threat Type :botnet_cc
Malware: AsyncRAT
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS40676 AS40676
Country:- US
First seen:2026-08-19 06:04:51 UTC
Last seen:never
UUID:18ca1538-9b37-11f1-a7c1-42010aa4000a
Reporter isahjs6
Reward 5 credits from ThreatFox
Tags:asyncrat HTA mexico WhatsApp
Reference: https://bazaar.abuse.ch/sample/8437f141b392c50cb27717fef260b9bc0509178eb7919afe96b637b30cdca5d8/

Avatar
isahjs6
AsyncRAT 0.5.8 C2. Delivered via .hta over WhatsApp, Spanish lure 'Listado Nuevo', hollowed into CasPol.exe. Pinned self-signed cert CN=Server SHA256 7a0d18772e6d4d4c17d29950fc961d0c75af346dcab347e3cb8e5a7174807d91. Mutex ABPuB5SidVDl.