#ioc#dcrat
Overview
Indicators of compromise associated with DCRat. 21 indicators listed below, linked to the G0099 adversary profile.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| url | http://keutbdump3.temp.swtest.ru/pipePhpjsPacketLongpoll.php | July 19, 2026 | 100% |
| ip:port | 144.172.88.233:5656 | July 18, 2026 | 75% |
| domain | nuevocomienzp333.duckdns.org | July 18, 2026 | 100% |
| domain | gfhdsjkasd.duckdns.org | July 18, 2026 | 100% |
| url | https://store.julias.makeup/img_094957.png | July 18, 2026 | 50% |
| ip:port | 46.246.82.7:2003 | July 17, 2026 | 75% |
| ip:port | 221.212.219.56:8848 | July 17, 2026 | 75% |
| ip:port | 5.200.192.159:8848 | July 16, 2026 | 75% |
| url | http://ct607808.tw1.ru/L1nc0In.php | July 16, 2026 | 100% |
| ip:port | 178.73.192.16:8848 | July 15, 2026 | 75% |
| ip:port | 104.225.104.237:3020 | July 15, 2026 | 75% |
| ip:port | 82.47.101.76:8080 | July 15, 2026 | 75% |
| ip:port | 104.225.104.237:2030 | July 15, 2026 | 75% |
| ip:port | 176.53.159.46:8090 | July 13, 2026 | 100% |
| ip:port | 128.90.105.247:7998 | July 13, 2026 | 75% |
| ip:port | 196.251.121.74:2323 | July 13, 2026 | 100% |
| ip:port | 178.73.218.4:8848 | July 12, 2026 | 75% |
| ip:port | 137.220.152.132:8848 | July 12, 2026 | 75% |
| ip:port | 137.220.152.131:12159 | July 12, 2026 | 75% |
| ip:port | 196.251.121.120:35630 | July 12, 2026 | 100% |
| ip:port | 172.86.77.116:5656 | July 12, 2026 | 75% |
Related content