ThreatFox IOC Database
You are viewing the ThreatFox database entry for ip:port 18.222.96.210:29563.
Database Entry
This IOC expired
This IOC is an old IOC and hence has expired on 2026-09-15 10:39:25 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.
| IOC ID: | 275373 |
|---|---|
| IOC: | 18.222.96.210:29563 |
| IOC Type : | ip:port |
| Threat Type : | botnet_cc |
| Malware: | Vjw0rm |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS16509 AMAZON-02 |
| Country: |  US |
| First seen: | 2021-12-13 17:22:13 UTC |
| Last seen: | never |
| UUID: | 364201fe-5c39-11ec-8ab6-42010aa4000a |
| Reporter |  AndreGironda |
| Reward | 5 credits from ThreatFox |
| Tags: | Vjw0rm |
| Reference: | https://tria.ge/211213-vsj8esdhg5 |
AndreGironda
MITRE T1566.001Date: Mon, 13 Dec 2021 16:30-17:00 +0000
Return-Path: info@tcccheer.com
Received: from [184.106.54.114] ([184.106.54.114:51187] helo=smtp114.ord1d.emailsrvr.com)
X-Auth-ID: info@tcccheer.com
Message-ID: <02.28.15783.24577B16@smtp16.gate.ord1d.rsapps.net>
Content-Type: multipart/mixed; boundary="===============0055907212=="
MIME-Version: 1.0
Subject: Reminder for Invoice #20827
To: Recipients <info@tcccheer.com>
From: "Trustgroup" <info@tcccheer.com>
Attachment Name: Order_20827.zip
Attachment SHA256: 4461faafb8c1da9cb058f9d1cc01f6e646503eb5f5e8e9c5d92e8a7f316ba330
Container Name: Order_20827.img
Container SHA256: 9f19175d2e17e742a34a0ddc67da29cfd65118b7f0941184b3991b98ff087a9a
JavaScript Dropper Name: Order_20827.js
JS Dropper SHA256: 528452ce702d1bc05f0c968137625ae1518faf152aeac200948e39974c6ef4cf