5.61.59.53
5.61.59.53 is an IP address
that 2 published sources report
in connection with Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from AhnLab ASEC.
The earliest of those reports is dated 2023-10-15 and the most recent 2023-10-16.
ip address Kimsuky MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Scalaxy B.V. |
| Announced by | AS58061 Scalaxy B.V. |
| Country | The Netherlands |
| Flags | hosting range |
Sources
-
…문자열에 포함되어 있다. Base64 문자열을 복호화 하면 나머지 설정 데이터도 확인이 가능하다. 설정 데이터 버전 “1.0” 뮤텍스 “ZhengReversePC” Host IP 5.61.59.53 Host Port 0 MSTSC (RDP) IP 127.0.0.2 MSTSC (RDP) Port 3389 Main (C&C) Port 2086 Table 1.…
RDP를 이용해 감염 시스템을 제어하는 Kimsuky 위협 그룹 - ASEC — AhnLab ASEC -
…configuration data by decrypting the Base64 string. Settings Data Version “1.0” Mutex “ZhengReversePC” Host IP 5.61.59.53 Host port 0 MSTSC (RDP) IP 127.0.0.2 MSTSC (RDP) port 3389 Main (C&C) port 2086 Table 1.…
Kimsuky Threat Group Uses RDP to Control Infected Systems - ASEC — AhnLab ASEC
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.