TF-2012757
high
📛 Threat Title
DCRat: ip:port combination that is used for botnet Command&control (C&C) 31.56.19.190:9999
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: DCRat (aliases: DarkCrystal RAT). Confidence: 75. Observed port: 9999. First seen: 2026-11-03 09:44:55 UTC. Last seen: 2026-11-03 12:44:48 UTC. Reporter: abuse_ch. Tags: dcrat, drb-ra, RAT.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
31.56.19.190
IOC database
- Type
- ipv4
- Value
31.56.19.190- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ip:port combination that is used for botnet Command&control (C&C) attributed to DCRat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile Threatfox IOCs/Threats
-
ThreatFox IOC page
Threatfox IOCs/Threats
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: DCRat (aliases: DarkCrystal RAT). Confidence: 75. Observed port: 9999. First seen: 2026-11-03 09:44:55 UTC. Reporter: abuse_ch. Tags: dcrat, drb-ra, RAT.
Remediations (7)
-
web:ascii.jp
We would like to show you a description here but the site won't allow us.
-
web:dec.ny.gov
301 Moved Permanently Moved Permanently The document has moved here.
-
web:github.com
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters Show hidden characters Original file line number Diff line number Diff line change Expand Up
-
web:muscleandbrawn.com
Muscle and Brawn
-
web:www.cisa.gov
This Insider Threat Mitigation Guide is designed to assist critical infrastructure owners and operators, related organizations, and communities in improving or establishing an insider threat mitigation program.
-
web:www.reddit.com
We would like to show you a description here but the site won't allow us.
-
web:www.taylorandfrancis.com
301 Moved Permanently 301 Moved Permanently nginx
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.