ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 178.20.44.131:8842.

Database Entry


IOC ID:275824
IOC: 178.20.44.131:8842
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS48282 VDSINA-AS
Country:- RU
First seen:2021-12-15 03:24:29 UTC
Last seen:2023-08-01 17:57:51 UTC
UUID:838a1d5c-5d56-11ec-8ab6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-12-16 02:10:12 888435e250cde8421a631a999bcfaa5c2166923fa6c0f2d65ab9d03c33362e26
2021-12-15 03:24:32 360476af17c5cdf83f2e5157d4b22bc72c2ca1be73b7912d3b323a965569fbdb