ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 104.168.102.173:5552.

Database Entry


IOC ID:219681
IOC: 104.168.102.173:5552
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
ASN:AS36352 AS-COLOCROSSING
Country:- US
First seen:2021-09-10 10:10:40 UTC
Last seen:never
UUID:5a172154-121f-11ec-830d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-09-11 06:55:45 04c164391efcedd93b5c04dc137e8b80336265246fa15318a67d4b2d20bf257f
2021-09-10 10:10:43 f4a8a2d81f379f33ae6bcffb81866663e8ae7ad07a49ad40deb9db6044ed9d75