>samit_hota
Back to IOCs

Indicators of Compromise

14 INDICATORSwin.noneuclid_rat

NonEuclid RAT — Indicators of Compromise

Samit Hota·
#ioc#noneuclid-rat

Overview

Indicators of compromise associated with NonEuclid RAT. 14 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port91.92.47.228:1383August 14, 202675%
ip:port91.92.47.228:1394August 14, 202675%
ip:port91.92.47.228:7000August 14, 202675%
ip:port91.92.47.228:8848August 14, 202675%
ip:port91.92.47.228:1297August 14, 202675%
ip:port91.92.47.228:1313August 14, 202675%
ip:port91.92.47.228:1329August 14, 202675%
ip:port91.92.47.228:1342August 14, 202675%
ip:port91.92.47.228:1360August 14, 202675%
ip:port91.92.47.228:1366August 14, 202675%
ip:port91.92.47.228:1372August 14, 202675%
ip:port91.92.47.228:1180August 14, 202675%
ip:port91.92.47.228:1293August 14, 202675%
ip:port91.92.47.228:1154August 14, 202675%

Related content

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call