Vidar_IOCs_2019-11-21_12_32.txt

#Vidar #Arkei #malware #OSINT #IOC

MD5s:
80f6a3ab80fe1081b0f9c399367dee33

IPs:
209[.]141[.]33[.]126

Domains:
ip-api[.]com
starlikespace[.]org

URL:
http://ip-api[.]com/line/,
http://starlikespace[.]org/,
http://starlikespace[.]org/517,
http://starlikespace[.]org/freebl3[.]dll,
http://starlikespace[.]org/freebl3[.]dll?ddosprotected=1,
http://starlikespace[.]org/mozglue[.]dll,
http://starlikespace[.]org/msvcp140[.]dll,
http://starlikespace[.]org/nss3[.]dll,
http://starlikespace[.]org/softokn3[.]dll,
http://starlikespace[.]org/vcruntime140[.]dll,