MalwareMessiagh

Ursnif IOC

Oct 18th, 2018
1,154
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.82 KB | None | 0 0
  1. Ursnif IOC:
  2. Dropping URL examples:
  3. http://teeberresb.com/RUI/levond.php?l=multo1.xap
  4. http://kivalehytr.com/RUI/levond.php?l=multo7.xap
  5. http://woatinkwoo.com/RUI/levond.php?l=donah4.xap
  6. http://derwagiete.com/RUI/levond.php?l=goks7.xap
  7. http://rockthewaves.ca/wp-admin/fqweqasda.rar
  8.  
  9. Dropping Domains:
  10. againstitudents.com
  11. shonathran.com
  12. nawseivett.com
  13. tapretriat.com
  14. derwagiete.com
  15. kivalehytr.com
  16. rockthewaves.ca
  17. teeberresb.com
  18. announcillon.com
  19. startlepools.com
  20. woatinkwoo.com
  21.  
  22. C2 Domains:
  23. k37aos82skd9nal92kamcdla.com
  24. hq92lmdlcdnandwuq.com
  25. 3u02982929euisowk209o.com
  26. 31uwow018wio10wiuwuqow.com
  27. ryiwuehwskosuqhs.com
  28. dhsiwyqdlskwsqo.com
  29. ey271psx8127301.com
  30. 37iwdmx103qlsmx.com
  31.  
  32. IPs:
  33. 54.39.81.122
  34. 54.39.81.123
  35. 54.39.81.127
  36. 54.39.74.124
  37. 95.215.44.192
  38. 142.44.168.138
  39. 178.33.208.166
  40. 192.99.238.42
  41. 198.23.255.10
Add Comment
Please, Sign In to add comment