ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 5.61.49.206:8880.

Database Entry


IOC ID:392760
IOC: 5.61.49.206:8880
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS58061 SCALAXY-AS
Country:- NL
First seen:2022-03-06 18:55:45 UTC
Last seen:never
UUID:07707800-9d7f-11ec-a022-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-03-07 10:55:29 104fae3c4dcf6339429a9242d76cec45644e5b2e072fdfa0d5f477c7ec7ebcfb
2022-03-07 10:40:27 ca5309eca6c4688b50a8dd11520273ad243177d016b7b35282cc73a17ca768ed
2022-03-06 21:00:31 415cef68482c74fcfff231fafc63bf9835c72da00e826e753aac86f704db7ac8
2022-03-06 18:55:47 43d18b33476103673974091c85aa62183fc5a5864af7048198d95eb6d5a05e25