179.60.150[.]151IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 months ago
What the reports say
3 reports, newest first · the exact sentence from each-
Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure“179.60.150[.]151”
-
ShadowSilk: A Cross-Border Binary Union for Data Exfiltration“execute -H -f rsocx.exe -a "-r 179.60.150[.]151:8000"”
-
Dusting for fingerprints: ShadowSyndicate, a new RaaS player?“179.60.150[.]151”
Indicators reported together
named in the same reports- 81.19.136[.]241in 2 reports
- hxxps://api.telegram[.]org/botin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.