ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 79.134.225.50:83.

Database Entry


IOC ID:9210
IOC: 79.134.225.50:83
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Nanocore RAT
Malware alias:Nancrat, NanoCore
Confidence Level : Confidence level is elevated (75%)
ASN:AS6775 FINK-TELECOM-SERVICES
Country:- CH
First seen:2021-04-20 07:57:18 UTC
Last seen:2023-09-27 18:37:41 UTC
UUID:0773ffb4-a1ae-11eb-a134-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:NanoCore
Reference: https://bazaar.abuse.ch/sample/9af05c1cb783bb50a2f280fd22bdc4a8b5160488afc7093a383e6e60cac4d90e/

Avatar
abuse_ch
nanocore (aka Nancrat,NanoCore) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-04-22 06:25:23 60ea3bae77de9a72d976144ee268cde17dda353dcb981a104b0e2d741b3c803c
2021-04-21 13:31:04 7e07bde93d122c059f5b159267f273d05ff8ac8bec540f3ae3bc7c8cd32f1fc7