ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 78.153.144.94:41964.

Database Entry


IOC ID:850104
IOC: 78.153.144.94:41964
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS207713 GIR-AS
Country:- RU
First seen:2022-09-16 19:17:18 UTC
Last seen:2023-08-01 18:04:47 UTC
UUID:2e27912e-35f4-11ed-ae73-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-09-16 19:17:20 49214588a91462749676c2ac4b5be9597df2ad1dd1703c2a99c1fb03ab49db9a
2022-09-16 19:17:18 1712383427373945d7cf3fa2167b6cfc6c379e7c30fd102aaeffba1c46deec1a