MalwareMessiagh

Ursnif IOC

Dec 20th, 2018
1,283
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.65 KB | None | 0 0
  1. Dropping URLs:
  2. http://foermoudal.com/rez-senqo/o402ek2m.php?l=dalon[1-11].dds
  3. http://aoundantag.com/rez-senqo/o402ek2m.php?l=dalon[1-11].dds
  4. htxp://sudetztend.com/rez-senqo/o402ek2m.php?l=yuptb[1-11].dds
  5. http://tafertergr.com/rez-senqo/o402ek2m.php?l=yuptb[1-11].dds
  6. http://176.32.33.145/rez-senqo/o402ek2m.php
  7. http://89.223.89.8/rez-senqo/o402ek2m.php
  8.  
  9. C2:
  10. paveropitt.com
  11. pulneselle.com
  12. menehleibe.com
  13. liemuteste.com
  14. thulligend.com
  15. biermingui.com
  16. kalzusserr.com
  17. pallzelang.com
  18.  
  19. Domains registrant:
  20.  
  21. IPs:
  22. 46.29.165.55
  23. 89.223.89.8
  24. 109.234.35.55
  25. 176.32.33.145
  26. 193.187.173.215
  27. 193.187.173.220
  28. 209.141.56.224
Add Comment
Please, Sign In to add comment