TF-1812281 high

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 75. Observed port: 8015. First seen: 2026-05-14 19:43:34 UTC. Last seen: 2026-05-14 21:43:15 UTC. Reporter: abuse_ch. Tags: drb-ra, RAT, RemcosRAT.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile Threatfox IOCs/Threats
• ThreatFox IOC page Threatfox IOCs/Threats

  Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 75. Observed port: 8015. First seen: 2026-05-14 19:43:34 UTC. Last seen: 2026-05-14 21:43:15 UTC. Reporter: abuse_ch. Tags: drb-ra, RAT, RemcosRAT.

• Giant Bomb - Video game reviews, videos, forums and wiki.
  web:giantbomb.com

  Giant Bomb - Video game reviews, videos, forums and wiki.

  2026-05-22 00:46 UTC
• www.akamai.com
  web:www.akamai.com

  We would like to show you a description here but the site won't allow us.

  2026-05-22 00:46 UTC
• Games and mods development for Windows, Linux and Mac - ModDB
  web:www.moddb.com

  Games and mods development for Windows, Linux and Mac - ModDB

  2026-05-22 00:46 UTC
• wwwqa.microsoft.com
  web:wwwqa.microsoft.com

  We would like to show you a description here but the site won't allow us.

  2026-05-22 00:46 UTC
• Reddit
  web:www.reddit.com

  We would like to show you a description here but the site won't allow us.

  2026-05-22 00:46 UTC

Only Available for Registered Users. Sign in to view.