ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 47.108.142.95:64535.

Database Entry


IOC ID:1290821
IOC: 47.108.142.95:64535
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (100%)
ASN:AS701 UUNET
Country:- US
First seen:2024-06-29 22:17:37 UTC
Last seen:never
UUID:646f5231-3665-11ef-8261-42010aa4000a
Reporter drb_ra
Reward 10 credits from anonymous
10 credits from ThreatSleuth
10 credits from OktavianFox
10 credits from anonymous
Tags:ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd. CobaltStrike cs-watermark-100000

Avatar
drb_ra
Cobalt Strike Server Found
C2: HTTP @ 47[.]108[.]142[.]95:64535
C2 Server: 127[.]0[.]0[.]1,/Go/v6[.]01/SIDB7OYCP7Y
POST URI: /Define/comment/KYAM2E1WHN
Country: China
ASN: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.