ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 116.202.110.68:48426.

Database Entry


IOC ID:254828
IOC: 116.202.110.68:48426
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS24940 HETZNER-AS
Country:- DE
First seen:2021-11-26 00:05:58 UTC
Last seen:2023-08-01 17:56:27 UTC
UUID:a20e859c-4e4c-11ec-8ab6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-11-26 10:11:01 05298ffd3da1eeaf8c65744a53d8f1c99129142f548b967925c20e824232ee33
2021-11-26 00:10:58 0990a2572d8b275f4adb305f3673f72ba4baafa1f85c7132a2306531517ebca8