TF-1932806 high

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 100. Observed port: 14644. First seen: 2026-09-25 12:10:19 UTC. Reporter: Bitsight. Tags: c2, Chimelumya$$$, remcos.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 100. Observed port: 14644. First seen: 2026-09-25 12:10:19 UTC. Reporter: Bitsight. Tags: c2, Chimelumya$$$, remcos.

• ASCII.jp － トップ
  web:ascii.jp

  We would like to show you a description here but the site won't allow us.

  2026-09-25 14:12 UTC
• Indian Cyber Club
  web:indiancyberclub.com

  We would like to show you a description here but the site won't allow us.

  2026-09-25 14:12 UTC
• OWASP Foundation
  web:owasp.org

  OWASP Foundation ... Redirecting...

  2026-09-25 14:12 UTC
• Home Page | CISA
  web:www.cisa.gov

  Home Page | CISA

  2026-09-25 14:12 UTC
• Elastic
  web:www.elastic.co

  Elastic

  2026-09-25 14:12 UTC
• Reddit
  web:www.reddit.com

  We would like to show you a description here but the site won't allow us.

  2026-09-25 14:12 UTC
• Backdoor.Win32.REMCOS.UGR - 脅威データベース | Trend Micro (JP)
  web:www.trendmicro.com

  手順 7 コンピュータを通常モードで再起動し、最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、「Backdoor.Win32. REMCOS .UGR」と検出したファイルの検索を実行してください。

  2026-09-25 14:12 UTC

Only Available for Registered Users. Sign in to view.