>samit_hota
Back to IOCs
8 indicators

Remus — Indicators of Compromise

Samit Hota·
#ioc#remus

Overview

Indicators of compromise associated with Remus. 8 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port77.42.90.175:9895July 21, 2026100%
ip:port62.171.177.27:2930July 21, 2026100%
urlhttp://fimmora.surf:6504July 21, 202675%
urlhttp://smaeak.top:5789July 17, 202675%
urlhttp://digiace.top:4190July 17, 202675%
urlhttp://vertefx.top:7538July 15, 202675%
urlhttp://syntaxj.top:6278July 15, 202675%
domainzelpx.gardenJuly 15, 2026100%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call