Wacatac_IOCs_2019-12-24_12_04.txt

Wacatac_IOCs_2019-12-24_12_04

Malware Famaily: Wacatac

SHA256:
4e415a1208ebef7b1a0c4ea08eb5149e2504707dc3d8060371f464583ddfb2af

IPs:
112[.]82[.]242[.]163
116[.]211[.]100[.]182
183[.]95[.]89[.]203
2[.]1[.]0[.]26

Domains:
dssp[.]stnts[.]com
youtop-engine[.]stnts[.]com

URL:
http://dssp[.]stnts[.]com:8888/?opt=put&mq=newicon_shellstart&data=&gid=1905353524&mac=18C086CD4732&pcname=Host&bootid=3C2433D3B92A46D33E2AD4B8C038A5BD&start=TRUE&&version=2[.]1[.]0[.]26&cid=EABAFDC9&ccid=0&tgid=&p=AAAmc3RhcnQ9VFJVRSYmdmVyc2lvbj0yLjEuMC4yNiZjaWQ9RUFCQUZEQzkmY2NpZD0wJnRnaWQ9AAAAAA==,
http://dssp[.]stnts[.]com:8888/?opt=put&mq=plug_desktopstart&data=&gid=1905353524&mac=18C086CD4732&pcname=Host&bootid=3C2433D3B92A46D33E2AD4B8C038A5BD&version=2[.]1[.]0[.]26&cid=EABAFDC9&ccid=00000000&iconNum=100&tgid=&p=AAAmdmVyc2lvbj0yLjEuMC4yNiZjaWQ9RUFCQUZEQzkmY2NpZD0wMDAwMDAwMCZpY29uTnVtPTEwMCZ0Z2lkPQAAAAAA,
http://youtop-engine[.]stnts[.]com/v2/icon?cid=EABAFDC9&ccid=00000000&bootid=3C2433D3B92A46D33E2AD4B8C038A5BD&pcname=Host&mac=18C086CD4732&scheme=0,

#malware #OSINT #IOC
#Wacatac