Malware IOC 20200809

Malware IOC 20200809
Revenge RAT
HASH
7f135d11f4a2c1ca2bdba1e54b4549cd2f9f2dda8343b6cc6155d9aa23f7a8ba

C&C
tcp://35[.]192[.]202[.]11:5555

PowerShell_CobaltStrike_Beacon_Reverse_HTTP_x86
HASH
e4ea5efc8a9511bb51d35f25a76e35ff941877252a4d3f043f3547c63d176ddf

C&C
91[.]232[.]105[.]248:1337

NanoCore RAT
HASH
77cb032892c4b001b54871403e09aaae085be1549f0c3c7b1d9d89a88592a358

C&C
tcp://amazigh15-43861[.]portmap[.]host:43861

Sodinokibi勒索病毒
HASH
f97175fdad804a02e6f24273b371184d816044eb2409dadaad683c07fd41e992
e6af534b1dbee86e294e4110dd70a1dd089feef0c7e4c9946abac7b988fe7763
4bb9def5bfdddcd575dd7b07800290b37304253979e0d2cc8ee38a52711fd327
d91fb28bbaf54e85e5a87e608c2bb630e7be06815f17541d680823faab4a8fb5

Donot APT
HASH
9eb18198d02001614f19a9b2822dcb33

C&C
app-measurement[.]com

AsyncRAT
HASH
3a81c9e1bfe70ae9506eef64194e9b6b8a49a7c2f64fa427ed31d0a9444a785e

C&C
sirenhead[.]ddns[.]net:6606
sirenhead[.]ddns[.]net:7707
sirenhead[.]ddns[.]net:8808
sirenhead[.]ddns[.]net:5000
sirenhead[.]ddns[.]net:1111
sirenhead[.]ddns[.]net:2222
sirenhead[.]ddns[.]net:30

njRAT
HASH
a716a35bb4eb9c4f04321be51ce95b7a0e3848218b2e01fc228e3f3ee7fe9e58

C&C
118[.]44[.]153[.]68:5252

TA505
HASH
3f96363347b9274790b5df813b83f381

C&C
none-class[.]com

Mirai变种
C&&C
45.143.223[.]178
45.95.168[.]247

URL
hxxp://45.143.223[.]178/Scylla.sh
hxxp://45.95.168[.]247/Scylla.sh

Avaddon勒索病毒
HASH
6c660f960daac148be75427c712d0134