Malicious_IOCs_2019-08-10_13_41.txt

Malicious_IOCs_2019-08-10_13_41

Malware Famaily: Malicious

MD5s:
683bf9b9036833ec0da785b054ab5125
6c4a16d715e82255eef20dd998c8e55b
e6e5eab95f6e9d86f95264f166beb768

IPs:
1[.]2[.]3[.]4
169[.]254[.]255[.]254
170[.]130[.]31[.]104
172[.]217[.]0[.]46
172[.]217[.]164[.]110
172[.]217[.]5[.]110
185[.]19[.]85[.]167
185[.]244[.]31[.]248
185[.]62[.]188[.]169
188[.]241[.]39[.]10
192[.]169[.]69[.]25
216[.]58[.]194[.]174
51[.]77[.]254[.]184
66[.]154[.]103[.]133
79[.]134[.]225[.]32
88[.]99[.]66[.]31
91[.]199[.]212[.]52

Domains:
3prokladkaeu[.]com
amariceo[.]duckdns[.]org
google[.]com
millionways[.]duckdns[.]org

URL:
http://3prokladkaeu[.]com/set[.]exe
http://3prokladkaeu[.]com/taskis[.]exe
http://crt[.]comodoca[.]com/COMODORSAAddTrustCA[.]crt
http://crt[.]comodoca[.]com/COMODORSADomainValidationSecureServerCA[.]crt
http://maper[.]info/XGu48

#malware #OSINT #IOC
#Malicious