>samit_hota
Back to IOCs

Indicators of Compromise

27 INDICATORSG0045elf.potassium

Potassium — Indicators of Compromise

Samit Hota·
#ioc#potassium

Overview

Indicators of compromise associated with Potassium. 27 indicators listed below, linked to the G0045 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port89.185.82.39:15987September 30, 2026100%
ip:port5.181.2.72:15987September 30, 2026100%
ip:port5.181.2.75:7193September 30, 2026100%
ip:port5.181.2.72:7193September 30, 2026100%
ip:port89.185.82.38:23789September 29, 2026100%
ip:port89.185.82.39:23789September 29, 2026100%
ip:port89.185.82.37:23789September 29, 2026100%
ip:port5.181.2.159:15987September 29, 2026100%
ip:port45.95.233.131:42061September 29, 2026100%
ip:port89.185.82.38:15987September 28, 2026100%
ip:port89.185.82.37:15987September 28, 2026100%
ip:port212.192.14.31:42061September 28, 2026100%
ip:port130.49.190.185:27651September 28, 2026100%
ip:port212.192.14.31:23789September 27, 2026100%
ip:port130.49.190.185:15987September 26, 2026100%
ip:port45.95.233.131:15987September 26, 2026100%
ip:port212.192.14.31:15987September 26, 2026100%
ip:port130.49.190.185:23789September 26, 2026100%
ip:port45.95.233.131:23789September 26, 2026100%
ip:port130.49.190.185:7193September 26, 2026100%
ip:port212.192.14.31:7193September 26, 2026100%
ip:port45.95.233.131:7193September 26, 2026100%
ip:port217.60.103.25:7193September 26, 2026100%
ip:port89.185.82.38:7193September 26, 2026100%
ip:port89.185.82.37:7193September 26, 2026100%
ip:port5.181.2.159:7193September 26, 2026100%
ip:port89.185.82.39:7193September 26, 2026100%

Related content

Adversary Profile

menuPass (G0045): China's Enduring Cyber Espionage Arm

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call