TF-1868477
high
📛 Threat Title
Mirai: ip:port combination that delivery a malware payload 176.65.148.145:2
Description
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 100. Observed port: 2. First seen: 2026-08-04 19:06:53 UTC. Reporter: botnetkiller. Tags: Mirai, nc.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
176.65.148.145
IOC database
- Type
- ipv4
- Value
176.65.148.145- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ip:port combination that delivery a malware payload attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 100. Observed port: 2. First seen: 2026-08-04 19:06:53 UTC. Reporter: botnetkiller. Tags: Mirai, nc.
Remediations (10)
-
web:executivebiz.com
The U.S. Army is soliciting feedback on its plan to establish a consortium-like organization and a contract vehicle to support the development of fire support command and control systems and other digital fires products designed to improve the decision-making process and accelerate kill chains against near-peer threats. Army Contracting Command-Aberdeen Proving Ground and the service's ...
-
web:icscsi.org
We would like to show you a description here but the site won't allow us.
-
web:ieeexplore.ieee.org
Security breaches due to attacks by malicious software ( malware ) continue to escalate posing a major security concern in this digital age. With many computer users, corporations, and governments affected due to an exponential growth in malware attacks, malware detection continues to be a hot research topic. Current malware detection solutions that adopt the static and dynamic analysis of ...
-
web:pubs.acs.org
ACS Publications
-
web:support.oracle.com
We've detected that JavaScript is disabled in your browser. Visual Builder applications cannot run without JavaScript. Please enable JavaScript in your browser.
-
web:thita.astrolavos.gatech.edu
Our current defenses against IoT malware may not be ade- quate to remediate an IoT malware attack similar to the Mirai botnet. This work seeks to investigate this matter by systemat- ically and empirically studying the lifecycle of IoT malware and comparing it with traditional malware that target desktop and mobile platforms.
-
web:www.echoxec.com
We would like to show you a description here but the site won't allow us.
-
web:www.kasada.io
The infection phase of a botnet attack involves the propagation of malware to vulnerable devices, thus transforming them into bots. Attackers typically employ various delivery methods during this phase, such as spamming and social engineering.
-
web:www.reddit.com
We would like to show you a description here but the site won't allow us.
-
web:www.trendmicro.com
PurpleFox Backdoor The installed malware is a .dll file protected with VMProtect. Using the other data file installed by the MSI package, it unpacks and manually loads different DLLs for its functionality. It also has a rootkit driver that is also unpacked from the data file and is used to hide its files, registry keys, and processes.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.