Azorult_IOCs_2020-06-25_12_38.txt

#Azorult #malware #OSINT #IOC

SHA256:
52628c4b4699682d37fc177a2d3ddfbfda54e47f31a9350756da8e4432cf6053

IPs:
195[.]245[.]112[.]115
217[.]8[.]117[.]45
34[.]105[.]129[.]68

Domains:
aaronthompson[.]ug
telete[.]in
zaragoza[.]ug

URL:
http://195[.]245[.]112[.]115/index[.]php
http://195[.]245[.]112[.]115/index[.]php,
http://34[.]105[.]129[.]68/gate/libs[.]zip
http://34[.]105[.]129[.]68/gate/log[.]php
http://34[.]105[.]129[.]68/gate/sqlite3[.]dll
http://aaronthompson[.]ug/index[.]php
http://zaragoza[.]ug/
http://zaragoza[.]ug/,
http://zaragoza[.]ug/freebl3[.]dll
http://zaragoza[.]ug/main[.]php
http://zaragoza[.]ug/main[.]php,
http://zaragoza[.]ug/mozglue[.]dll
http://zaragoza[.]ug/msvcp140[.]dll
http://zaragoza[.]ug/nss3[.]dll
http://zaragoza[.]ug/softokn3[.]dll
http://zaragoza[.]ug/sqlite3[.]dll
http://zaragoza[.]ug/vcruntime140[.]dll