ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 37.0.11.164:7600.

Database Entry


IOC ID:396078
IOC: 37.0.11.164:7600
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Nanocore RAT
Malware alias:Nancrat, NanoCore
Confidence Level : Confidence level is elevated (75%)
ASN:AS3758 SINGNET
Country:- SG
First seen:2022-03-17 08:30:21 UTC
Last seen:2023-09-27 18:36:55 UTC
UUID:7c27571c-a5cc-11ec-a022-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:NanoCore
Reference: https://bazaar.abuse.ch/sample/ff4a09040a95516e54bc22554dbe82e7f280279ea38236b98f43afbd0c85719d/

Avatar
abuse_ch
nanocore (aka Nancrat,NanoCore) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-03-22 03:25:45 0c5d401cb457030a23fd5afe1ad88ab0ff4f1bdcad1d7307fefd614107daf0f9
2022-03-21 09:16:42 b771e6a9cb56600b3cb46440bd7af362598c9904350163754898505d35cff4ad