Security Intelligence Center

IOC Type: IPv4

Threat Type: T1190

MITRE ATT&CK: T1190

Related Tags: malicious-ip, T1190

Analysis Summary:
Detected a focused scan on Telnet (23), commonly associated with identifying legacy or weakly secured remote-access services for exploitation attempts.

Detection Engine: Defensium ATF Quad ...

📌 IOC Type: IPv4
🔹 Associated Rule Name: PURE7 - Initial Access - T1190 - Single Port Scan 23 TELNET
🔹 MITRE ATT&CK: T1190 (Initial Access)
🔹 Related Tags: malicious-ip, T1190
💬 Description: Detected a focused scan on Telnet (23), commonly associated with identifying legacy or weakly ...

YARA Signature Match - THOR APT Scanner

RULE: MAL_Gh0st_RAT_Mar19_1
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/MAL_Gh0st_RAT_Mar19_1
DESCRIPTION: Detects Gh0st RAT variant
REFERENCE: https://twitter.com/lazyactivist192/status/1107163871389892610...

YARA Signature Match - THOR APT Scanner

RULE: Naid_McRAT_3
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/Naid_McRAT_3
DESCRIPTION: Detects Trojan Naid / McRAT malware
REFERENCE: Virustotal Research
RULE_AUTHOR: Florian Roth

Detection Timestamp: 20...

YARA Signature Match - THOR APT Scanner

RULE: MAL_ZomnbieBoy_Keylogger_Oct18_1
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/MAL_ZomnbieBoy_Keylogger_Oct18_1
DESCRIPTION: Detects malware mentioned in ZombieBoy report
REFERENCE: https://www.alienvau...

YARA Signature Match - THOR APT Scanner

RULE: MAL_Nitol_May_1
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/MAL_Nitol_May_1
DESCRIPTION: Detects malware sample from Chinese crime activity
RULE_AUTHOR: Florian Roth

Detection Timestamp: 2026-08-31 0...

ELF DIGEST non-profit Sandbox:


Analysis Report: https://elfdigest.com/brief/10585c40613b1b8624a82b2c317e5eb10fa289f1b406f5a6dcc76e6277c5d513
...

[b]Original filename (SHA256)[/b] : 5676a633294aeefe8eb878b4abdab9255aea3421754cb34e9e284e8f688c5645

Comment added on 2026-08-31 05:04:45 French Time Zone

[b]MWDB Link[/b] : https://mwdb.cert.pl/file/5676a633294aeefe8eb878b4abdab9255aea3421754cb34e9e284e8f688c5645
[b]VirusShare Link[/b] : https://...

FileScan.IO Analysis:

Verdict: MALICIOUS
Confidence: 100/100
Tags: evasive,shell,shell,evasive,shell
Hosts: 160.119.69.4,45.95.147.178
Report: https://www.filescan.io/reports/3b3f8a88355702836eadd50b40969e1a6a4fb4339152b7fc2c35b3cd0b22327f/4a2c3ab3-2d56-45fa-b4d7-6cd6749bfdcf...

**File Info:**

**Filename:**
3e098032c916ea7e4db6e7227674eca8fd5e82b3f833d3141916369ec61ed582

**Threat Score:**
10/10

**Family:**
N/A

**File Report:**
https://jaffacakes118.dev/analysis/3e098032c916ea7e4db6e7227674eca8fd5e82b3f833d3141916369ec61ed582
https://tria.ge/260831-dhp79acp4t

**Tags:**
...