ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 49.12.190.6:40909.

Database Entry


IOC ID:848031
IOC: 49.12.190.6:40909
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS24940 HETZNER-AS
Country:- DE
First seen:2022-09-05 23:25:30 UTC
Last seen:never
UUID:0837dc89-2d72-11ed-ae73-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-09-06 00:10:35 2bf5be8c9b5e84d6eef09d6de968796a277ead7885cd96855f7637ddba987288
2022-09-05 23:30:41 6b2d7c8bdedb901d80c89717c9889abf169c9059d8bb545af6ca1960660324ad