TF-1868528
medium
📛 Threat Title
Mirai: ip:port combination that delivery a malware payload 45.38.249.148:1004
Description
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 50. Observed port: 1004. First seen: 2026-08-04 21:30:49 UTC. Reporter: botnetkiller. Tags: Mirai, nc.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
45.38.249.148
IOC database
- Type
- ipv4
- Value
45.38.249.148- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ip:port combination that delivery a malware payload attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 50. Observed port: 1004. First seen: 2026-08-04 21:30:49 UTC. Reporter: botnetkiller. Tags: Mirai, nc.
Remediations (10)
-
web:executivebiz.com
The U.S. Army is soliciting feedback on its plan to establish a consortium-like organization and a contract vehicle to support the development of fire support command and control systems and other digital fires products designed to improve the decision-making process and accelerate kill chains against near-peer threats. Army Contracting Command-Aberdeen Proving Ground and the service's ...
-
web:icscsi.org
We would like to show you a description here but the site won't allow us.
-
web:ieeexplore.ieee.org
Security breaches due to attacks by malicious software ( malware ) continue to escalate posing a major security concern in this digital age. With many computer users, corporations, and governments affected due to an exponential growth in malware attacks, malware detection continues to be a hot research topic. Current malware detection solutions that adopt the static and dynamic analysis of ...
-
web:pubs.acs.org
ACS Publications
-
web:thita.astrolavos.gatech.edu
Our work makes four contributions. First, we propose a novel analysis framework that captures the threat lifecycle of IoT malware , which considers the infection vectors, payload properties, persistence methods, capabilities, and C&C infras- tructure. Second, we use our framework to systematize 25 papers that study traditional malware .
-
web:www.kasada.io
The infection phase of a botnet attack involves the propagation of malware to vulnerable devices, thus transforming them into bots. Attackers typically employ various delivery methods during this phase, such as spamming and social engineering.
-
web:www.reddit.com
We would like to show you a description here but the site won't allow us.
-
web:www.researchgate.net
Malware analysis is an important and relevant task, for the advanced forms of malware these days are often not even detectable by commonly available anti-virus software. In the present paper,
-
web:www.servicenow.com
Vulnerability Response remediation tasks in ServiceNow help analysts and remediation specialists efficiently organize and analyze vulnerable items (VIs) in bulk. These tasks group VIs based on configurable criteria, eliminating the need for manual assignment and enabling more effective monitoring and driving of remediation efforts.
-
web:www.trendmicro.com
PurpleFox Backdoor The installed malware is a .dll file protected with VMProtect. Using the other data file installed by the MSI package, it unpacks and manually loads different DLLs for its functionality. It also has a rootkit driver that is also unpacked from the data file and is used to hide its files, registry keys, and processes.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.