FTCODE Ransomware

IOCs:

Md5

d597ea78067725ae05a3432a9088caae
c8a214f432fc9d74c913c02e7918fc0
f96253923e833362ecac97729d528f8c
cc0f64afa3101809b549cc5630bbd948
328ce454698307f976baa909e5c646c7
71a8d8c0543a99b8791e1cfaeeeb9211
f0aa45bb9dd09cfac9d93427a8f5c72c
d6da191bfc5966dd4262376603d4e8c1
cc5946ce893ff37ace8de210923467a2
7f5bb4529b95a872a916cc24b155c4cc
edd5fbe846fa51f3b555185627d0d6c5
a2e88f9486cc838eae038a8ba32352f3
eab63ee2434417bc46466df07dc6b5b5
fd46c05b99d00e11d34b93eae2c7ff2b
98d2221445c2c8528cef06e4ef3c9e36
URLs:

luigicafagna[.]it
audownload[.]windowsupdate[.]nsatc[.]net
lgin[.]msa[.]trafficmanager[.]net
home[.]southerntransitions[.]net
vs[.]login[.]msa[.]akadns6[.]net
nomi[.]tugnutz[.]com
login[.]msa[.]akadns6[.]net
home[.]ktxhome[.]com
dhol[.]rkeindustries[.]net
way[.]securewebgateway[.]com
stats[.]thomasmargiotti[.]com
pups[.]pupusas[.]net
print[.]impressnaples[.]com
print[.]impress-screen-printing[.]com
power[.]hagertyquote[.]com
men[.]unifiedthreatmanagementutm[.]com
kind[.]its1ofakind[.]com
ese[.]emarv[.]com
ehuxmtkxmdqy[.]top
connect[.]simplebutmatters[.]com
connect[.]heritageagencies[.]com
ceco[.]heritageins[.]co
cdn[.]danielrmurray[.]com
bxfmmtkxmdqy[.]top
biz[.]lotsofbiz[.]com
amq1mtkxmdqy[.]top
ahmwmtkxmdqy[.]top
agvlmtkxmtq4[.]top
agvlmtkxmdqy[.]top