Hashes
-------
e5b643cb6ec30d0d0b458e3f2800609f260a5f15c4ac66faf4ebf384f7976df6
66d24a529308d8ab7b27ddd43a6c2db84107b831257efb664044ec4437f9487b
43fad2d62bc23ffdc6d301571135222c
735f5d7ef0c5129f0574bec3cf3d6b06b052744a
8d89f53b0a6558d6bb9cdbc9f218ef699f3c87dd06bc03dd042290dedc18cb71
97cb7dc1395918c2f3018c109ab4ea5b
d20168c523058c7a82f6d79ef63ea546c794e57b
1b5e33e5a244d2d67d7a09c4ccf16e56
3215021976b933ff76ce3436e828286e124e2527
6c195ea18c05bbf091f09873ed9cd533ec7c8de7a831b85690e48290b579634b
934c51ff1ea00af2cb3b8465f0a3effcf759d866
03ea9457bf71d51d8109e737158be888

IP/Domains
-----------
http://139.59.46.154/
mol.com-ho.me
139.59.46.154
itworx.com-ho.me
http://ntg-sa.com/
45.32.186.33
ntg-sa.com
http://itworx.com-ho.me/
mci.com-ho.me
moh.com-ho.me
http://moh.com-ho.me/
http://mol.com-ho.me/
http://89.107.62.39/
http://mci.com-ho.me/
89.107.62.39

Filenames
----------
pupyx86.dll
Health_insurance_registration.doc
PupyRAT (pupyx86.dll)
Password_Policy.xlsm