TF-1833769
high
📛 Threat Title
Mirai: ip:port combination that delivery a malware payload 103.183.119.48:12560
Description
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 100. Observed port: 12560. First seen: 2026-06-18 12:03:46 UTC. Reporter: lilsheepyy. Tags: Mirai, payload, Sh.
Remediations (7)
-
web:bazaar.abuse.ch
We would like to show you a description here but the site won't allow us.
-
web:ieeexplore.ieee.org
Security breaches due to attacks by malicious software ( malware ) continue to escalate posing a major security concern in this digital age. With many computer users, corporations, and governments affected due to an exponential growth in malware attacks, malware detection continues to be a hot research topic. Current malware detection solutions that adopt the static and dynamic analysis of ...
-
web:ntrs.nasa.gov
The NASA Commercial Lunar Payload Services (CLPS) program delivery known as "CP-11" will carry multiple payloads to the lunar surface in 2024. The payloads include ( a ) Lunar Vertex, the first science suite sponsored by the NASA Science Mission Directorate's Payloads and Research Investigations on the Surface of the Moon (PRISM) program, (b) JPL's CADRE (Cooperative Autonomous Distributed ...
-
web:threatvault.paloaltonetworks.com
We would like to show you a description here but the site won't allow us.
-
web:www.congress.gov
Congress.gov
-
web:www.reddit.com
We would like to show you a description here but the site won't allow us.
-
web:www.trendmicro.com
The installed malware is a .dll file protected with VMProtect. Using the other data file installed by the MSI package, it unpacks and manually loads different DLLs for its functionality. It also has a rootkit driver that is also unpacked from the data file and is used to hide its files, registry keys, and processes.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
103.183.119.48
IOC database
- Type
- ipv4
- Value
103.183.119.48- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ip:port combination that delivery a malware payload attributed to Mirai
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile Threatfox IOCs/Threats
-
ThreatFox IOC page
Threatfox IOCs/Threats
Indicator that identifies a malware distribution server (payload delivery). IOC type: ip:port combination that delivery a malware payload. Attributed malware: Mirai (aliases: Katana). Confidence: 100. Observed port: 12560. First seen: 2026-06-18 12:03:46 UTC. Reporter: lilsheepyy. Tags: Mirai, payload, Sh.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.