>samit_hota
Back to IOCs

Indicators of Compromise

16 INDICATORSjs.ottercandy

OtterCandy — Indicators of Compromise

Samit Hota·
#ioc#ottercandy

Overview

Indicators of compromise associated with OtterCandy. 16 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port80.190.73.17:5000October 21, 2026100%
ip:port13.140.228.125:5000October 21, 2026100%
ip:port80.190.73.17:5056October 21, 2026100%
ip:port13.140.40.133:5000October 21, 2026100%
ip:port13.140.228.125:5056October 21, 2026100%
ip:port13.140.40.133:5056October 21, 2026100%
ip:port147.93.2.250:5000October 21, 2026100%
ip:port82.158.192.152:5056October 21, 2026100%
ip:port82.158.192.152:5000October 21, 2026100%
urlhttp://80.190.73.17:5000/session/b5b0cb4cae71351bOctober 21, 2026100%
domainrising-vercel.vercel.appOctober 21, 2026100%
ip:port5.249.163.245:3011October 21, 2026100%
ip:port5.83.138.155:3011October 21, 2026100%
ip:port5.175.213.199:3011October 21, 2026100%
ip:port31.220.98.95:3011October 21, 2026100%
ip:port147.93.2.250:5056October 21, 2026100%

Related content

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call