Vidar_IOCs_2019-11-26_12_40.txt

#Vidar #Arkei #malware #OSINT #IOC

MD5s:
35ec0654364545b3fed558d772360831

IPs:
18[.]205[.]93[.]0
18[.]205[.]93[.]1
18[.]205[.]93[.]2
208[.]95[.]112[.]1
209[.]141[.]33[.]126

Domains:
bitbucket[.]org
crarepo[.]com

URL:
http://bitbucket[.]org/fastuploads/2019/downloads/setup_m[.]exe,
http://bitbucket[.]org/metal-shake/app/downloads/setup_c[.]exe,
http://crarepo[.]com/,
http://crarepo[.]com/237,
http://crarepo[.]com/freebl3[.]dll,
http://crarepo[.]com/freebl3[.]dll?ddosprotected=1,
http://crarepo[.]com/mozglue[.]dll,
http://crarepo[.]com/msvcp140[.]dll,
http://crarepo[.]com/nss3[.]dll,
http://crarepo[.]com/softokn3[.]dll,
http://crarepo[.]com/vcruntime140[.]dll,