ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 20.52.46.119:52190.

Database Entry


IOC ID:223025
IOC: 20.52.46.119:52190
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Nanocore RAT
Malware alias:Nancrat, NanoCore
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS8075 MICROSOFT-CORP-MSN-AS-BLOCK
Country:- US
First seen:2021-09-17 16:41:17 UTC
Last seen:2023-09-27 18:36:51 UTC
UUID:1463498f-17d6-11ec-830d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:NanoCore
Reference: https://bazaar.abuse.ch/sample/b394295b8a2a6f1841abf35b7550a1e68a13ffd0fecd213f5745f93f92f8257f/

Avatar
abuse_ch
nanocore (aka Nancrat,NanoCore) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-09-20 15:10:47 9834ac16937d9ff37624909fd25d2ec31122dd1fda8d91c1f32b63b2ed69fecb
2021-09-17 16:46:10 b394295b8a2a6f1841abf35b7550a1e68a13ffd0fecd213f5745f93f92f8257f