TF-1932753 high

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 100. Observed port: 2301. First seen: 2026-09-25 11:47:17 UTC. Reporter: Bitsight. Tags: c2, nuevos 07, remcos.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Remcos (aliases: RemcosRAT,Remvio,Socmer). Confidence: 100. Observed port: 2301. First seen: 2026-09-25 11:47:17 UTC. Reporter: Bitsight. Tags: c2, nuevos 07, remcos.

• ASCII.jp － トップ
  web:ascii.jp

  We would like to show you a description here but the site won't allow us.

  2026-09-25 15:07 UTC
• OWASP Foundation
  web:owasp.org

  OWASP Foundation ... Redirecting...

  2026-09-25 15:07 UTC
• WSTG - Latest - OWASP Foundation
  web:owasp.org

  The Access-Control-Request-Method header is used when a browser performs a preflight OPTIONS request and lets the client indicate the request method of the final request. On the other hand, the Access-Control-Allow-Method is a response header used by the server to describe the methods the clients are allowed to use.

  2026-09-25 15:07 UTC
• Elastic
  web:www.elastic.co

  Elastic

  2026-09-25 15:07 UTC
• Backdoor.Win32.REMCOS.UGR - 脅威データベース | Trend Micro (JP)
  web:www.trendmicro.com

  手順 7 コンピュータを通常モードで再起動し、最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、「Backdoor.Win32. REMCOS .UGR」と検出したファイルの検索を実行してください。

  2026-09-25 15:07 UTC

Only Available for Registered Users. Sign in to view.