ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 20.74.148.241:11273.

Database Entry


IOC ID:456665
IOC: 20.74.148.241:11273
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS8075 MICROSOFT-CORP-MSN-AS-BLOCK
Country:- US
First seen:2022-03-28 03:41:11 UTC
Last seen:2023-08-01 18:01:30 UTC
UUID:e9775374-ae48-11ec-8c1d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-03-28 13:01:37 2e5b9ebfb2b81c5e512248e2e9224d1054defc4b027c0108fc10d268312ce290
2022-03-28 03:41:14 4dcd84003dc7b4d627193ce18034c71a3ee35980495d755d9bcf80a672eb544e