Amadey_IOCs_2019-08-10_13_21.txt

Amadey_IOCs_2019-08-10_13_21

Malware Famaily: #Amadey
https://pastebin.com/B5dLZLc6

MD5s:
791d04b0b23498361a9e63be49a4b817

IPs:
47[.]254[.]197[.]254
94[.]158[.]245[.]184

Domains:
laph[.]icu

URL:
http://34[.]90[.]198[.]153/file_handler2/file[.]php?hash=9fe0cff318b7fed95b82c99cfc35951e6468c82f&js=fc6accfb79ac418696d93c7e874f229bc4c57e44&callback=http://34[.]90[.]198[.]153/gate
http://34[.]90[.]198[.]153/gate/libs[.]zip
http://34[.]90[.]198[.]153/gate/log[.]php
http://34[.]90[.]198[.]153/gate/sqlite3[.]dll
http://luckymonkey[.]net[.]in/j88hNjkMn/index[.]php
http://www[.]rubthemoneybear[.]xyz/lucky/crypted[.]exe
http://www[.]rubthemoneybear[.]xyz/lucky/nsis[.]exe
http://www[.]rubthemoneybear[.]xyz/lucky/rac[.]exe

#malware #OSINT #IOC