Nymaim IOCs 19/10/2018

Dropped Executable
"1.exe" | %AppData%\Roaming\mHslaP.exe
MD5: b02fdf71bbcf390bd39fb472028ba4f3
SHA256: a66e0424fad62be500309e95ecd837d327b312910ed5421fb3e3b81838aea059

IP Addresses:
185.162.130.150
205.185.125.244
109.166.208.203
209.141.43.75
109.99.238.18
47.52.246.153
213.149.152.120
5.104.188.117
37.75.36.255
2.89.163.46
190.158.226.15
194.204.25.137
83.148.72.0
89.190.74.198

URL Requests
http://cclawsuit.com/hiznbyrz
http://carfax.com/xfi7wapy/index.php
http://205.185.125.244/Resume.zip
http://185.162.130.150/vK6wGM
http://205.185.125.244/1.hta
http://205.185.125.244/1.exe

DNS Requests
cclawsuit.com
dehionsgbes.com
jeusitigton.com