Hashes

04a8ec81d470d779101a2a39ad5b801668cbec7f78176f89766fd966744a9c38  ./news/1.exe
a766332dd4b26a623e341d03845c394209dedc3557d7bbb3c6a2edeeb9eadbeb  ./news/6.exe <- remcos rat c2 is 79.172.242.28
326395aaa7878f136cf1b425be58bafc14becbdf9541532abab89d4c6a6ab693  ./news/10.exe <- remcos rat c2 is 79.172.242.28
8f27a8c28b32fbef7d96966ec20db16ad7d93089dfce4311cb1b44d5e7fd6f07  ./bab/i1.exe < formbook c2 is www.unit-tech.services
58cb07fecced83dfe6a4999921297ad94248f47935568913aa2a1a60de1d330a  ./abb/r789.exe <- remcos rat c2 is 79.172.242.28
547de042b0d669e8aa2289fa898f6ba96d8eb7c679dffa79a02886d6ea31a393  ./demoami/432.exe <- remcos rat c2 is 79.172.242.28
b298c706c7769618a6417651ee88f9e6bfe0c370f89f476301fdd8f525d65e88  ./demoami/KYC-INQUIRY0718.exe <- remcos rat c2 is 79.172.242.28
80a3e21f98ab459846568332eb81380c2d49c7e532a1bbf988d47ca9c96fc461  ./demoami/99388.exe <- formbook c2 is www.plodameg.com
618cc1db8b0225b15c13df19b184970c0dfc180415c572ee7a12433a106e41e4  ./demoami/KYC-INQUIRY847.exe <- remcos rat c2 is 79.172.242.28
f434a43f906cbaf9973e7b9287c86bbc11db1998d797317f2eb6ddefce570b99  ./demoami/889.exe <- formbook c2 is www.dud00r.com
00ed2b037a623ce129844ac6d9cdd6a1340cc25a82d356e14e7a8af7f22c378d  ./demoami/okllll.exe <- remcos rat c2 is 79.172.242.28
326395aaa7878f136cf1b425be58bafc14becbdf9541532abab89d4c6a6ab693  ./oknew/10.exe <- remcos rat c2 is 79.172.242.28