Advertisement
malwageddon

Config file extracts from a recent DYRE sample - 2014-10-15

Oct 17th, 2014
800
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.09 KB | None | 0 0
  1. // Malware sample - https://www.virustotal.com/en/file/3f23306c3b94fc2d594836e972e32f2cc4a19787ed3d561dc0bfe52970798f70/analysis/
  2.  
  3. // Communicating with 63.141.253.186 on ports in range of 12000-28000
  4.  
  5. // List of banks malware is aiming to grab the data for. Quick glance at the main targets - US and UK. Also, present RO, IE, AE.
  6.  
  7. srv_Kill_Scrnsaver
  8. srv_access_jpmorgan_com
  9. srv_accounts_expresscoin_com
  10. srv_aibinternetbanking_aib_ie
  11. srv_alolb1_arbuthnotlatham_co_uk
  12. srv_anxbtc_com
  13. srv_bank_barclays_co_uk
  14. srv_banking_bankofscotland_co_uk
  15. srv_banking_ireland-bank_com
  16. srv_banking_triodos_co_uk
  17. srv_bankofirelandlifeonline_ie
  18. srv_bitbargain_co_uk
  19. srv_bitpay_com
  20. srv_blockchain_info
  21. srv_bolpp_bankofireland_com
  22. srv_btultra_btrl_ro
  23. srv_bureau_bottomline_co_uk
  24. srv_business2_danskebank_co_uk
  25. srv_business2_danskebank_ie
  26. srv_business_co-operativebank_co_uk
  27. srv_business_santander_co_uk
  28. srv_businessaccess_citibank_citigroup_com
  29. srv_businessbankingcpo_tdcommercialbanking_com
  30. srv_businessonline_mutualofomahabank_com
  31. srv_butterfieldonline_co_uk
  32. srv_cashproonline_bankofamerica_com
  33. srv_cbfm_saas_cashfac_com
  34. srv_cbionline_cbi_ae
  35. srv_charisma_btdirect_ro
  36. srv_chsec_wellsfargo_com
  37. srv_cityntl_webcashmgmt_com
  38. srv_commercial_bnc_ca
  39. srv_corporate_adcb_com
  40. srv_corporate_metrobankonline_co_uk
  41. srv_corporate_santander_co_uk
  42. srv_dashboard_gocoin_com
  43. srv_eadibcorp_adib_ae
  44. srv_ebanking2_danskebank_co_uk
  45. srv_esavings_shawbrook_co_uk
  46. srv_fastbanking_bancpost_ro
  47. srv_fdonline_co-operativebank_co_uk
  48. srv_fidelitytopeka_btbanking_com
  49. srv_home1_ybonline_co_uk
  50. srv_home2_cybusinessonline_co_uk
  51. srv_ht_businessonlinepayroll_com
  52. srv_ib_btrl_ro
  53. srv_ibank_gtbankuk_com
  54. srv_ibank_reliancebankltd_com
  55. srv_ibank_zenith-bank_co_uk
  56. srv_ibb_firsttrustbank1_co_uk
  57. srv_ibusinessbanking_URL
  58. srv_ibusinessbanking_aib_ie
  59. srv_itreasury_regions_com
  60. srv_ktt_key_com
  61. srv_leumionline_bankleumi_co_uk
  62. srv_lloydslink_online_lloydsbank_com
  63. srv_localbitcoins_com
  64. srv_login_24banking_ro
  65. srv_login_isso_db_com
  66. srv_login_salesforce_com
  67. srv_login_smartbusiness_ae
  68. srv_my_sjpbank_co_uk
  69. srv_net_crediteurope_ro
  70. srv_netbanking_mashreqbank_com
  71. srv_netbanking_ubluk_com
  72. srv_northrimbankonline_btbanking_com
  73. srv_online_adambank_cV
  74. srv_online_adambank_com
  75. srv_online_bankofcyprus_co_uk
  76. srv_online_bankofscotland_co_uk
  77. srv_online_coutts_com
  78. srv_online_dib_ae
  79. srv_online_duncanlawrie_com
  80. srv_online_ebs_ie
  81. srv_online_hoaresbank_co_uk
  82. srv_online_kbc_ie
  83. srv_online_ybs_co_uk
  84. srv_onlinebusiness_lloydsbank_co_uk
  85. srv_personal_co-operativebank_co_uk
  86. srv_retail_santander_co_uk
  87. srv_ro_unicreditbanking_net
  88. srv_s2b_standardchartered_co
  89. srv_s2b_standardchartered_com
  90. srv_safello_com
  91. srv_santander_hpdsc_com
  92. srv_secure2_alphabank_ro
  93. srv_secure_coinjar_com
  94. srv_secure_handelsbanken_com
  95. srv_secure_internetbanking_ro
  96. srv_secure_membersaccounts_com
  97. srv_usgateway_rbs_com
  98. srv_webcmpr_bancopopular_com
  99. srv_wellsoffice_wellsfargo_com
  100. srv_www1_firstdirect_com
  101. srv_www1_rbcbankusa_com
  102. srv_www22_bmo_com
  103. srv_www6_rbc_com
  104. srv_www_
  105. srv_www_365online_com
  106. srv_www_@
  107. srv_www_arabi-online_net
  108. srv_www_asbolb_com
  109. srv_www_bankline_natwest_com
  110. srv_www_bankline_rbs_com
  111. srv_www_bankline_ulsterb
  112. srv_www_bankline_ulsterb<?xml version="1.0" encoding="UTF-8"?>
  113. srv_www_bankline_ulsterbank_ie
  114. srv_www_barclayswealth_com
  115. srv_www_bitstamp_net
  116. srv_www_boi-bol_com
  117. srv_www_brdoffice_ro
  118. srv_www_business_hsbc_co_uk
  119. srv_www_cardonebanking_com
  120. srv_www_caterallenonline_co_uk
  121. srv_www_ceconline_ro
  122. srv_www_coinbase_com
  123. srv_www_commercial_hsbc_com_hk
  124. srv_www_corporate-clients_commerzbank_com
  125. srv_www_halifax-online_co_uk
  126. srv_www_ingonline_com
  127. srv_www_internationalpayments_co_uk
  128. srv_www_investbank_ae
  129. srv_www_iombankibanking_com
  130. srv_www_kbinternetbanking_com
  131. srv_www_natwestibanking_com
  132. srv_www_nwolb_com
  133. srv_www_onlinebanking_iombank_com
  134. srv_www_onlinebanking_natwestoffshore_com
  135. srv_www_open24_ie
  136. srv_www_raiffeisenonline_ro
  137. srv_www_rbsdigital_com
  138. srv_www_rbsidigital_com
  139. srv_www_rbsiibanking_com
  140. srv_www_signatureny_web-access_com
  141. srv_www_suntrust_com
  142. srv_www_svbconnect_com
  143. srv_www_treasury_pncbank_com
  144. srv_www_ulsterbankanytimebanking_ie
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement