Pikabot Malware Campaign by TA577 - 06.03.24

c2 list:
https://70.34.223.164:5000/api/admin.apps.approve
https://70.34.199.64:9785/api/admin.conversations.ekm.listOriginalConnectedChannelInfo
https://154.12.236.248:13786/api/admin.apps.restrict
https://94.72.104.77:13724/api/admin.apps.restrict
https://94.72.104.80:5000/api/admin.conversations.restrictAccess.removeGroup
https://84.46.240.42:2083/api/admin.inviteRequests.approved.list
https://209.126.86.48:1194/api/admin.conversations.ekm.listOriginalConnect
https://158.247.240.58:5632/api/admin.conversations.getConversationPrefs
https://154.12.236.248:13786/api/admin.conversations.invite
https://94.72.104.80:5000/api/apps.event.authorizations.list
https://70.34.199.64:9785/api/apps.event.authorizations.list
https://154.53.55.165:13783/api/admin.conversations.archive
https://158.247.240.58:5632/api/admin.conversations.invite
https://209.126.86.48:1194/api/admin.conversations.archive
https://45.77.63.237:5632/api/apps.event.authorizations.list
https://198.38.94.213:2224/api/apps.event.authorizations.list
https://70.34.223.164:5000/api/apps.permissions.users.request
https://94.72.104.77:13724/api/admin.conversations.archive
https://84.46.240.42:2083/api/apps.event.authorizations.list
https://70.34.223.164:5000/api/apps.event.authorizations.list
https://209.126.86.48:1194/api/apps.event.authorizations.list
https://94.72.104.77:13724/api/apps.permissions.users.request
https://45.77.63.237:5632/api/admin.conversations.archive

70.34.223.164
70.34.199.64
154.12.236.248
94.72.104.77
94.72.104.80
84.46.240.42
209.126.86.48
158.247.240.58
154.53.55.165
45.77.63.237
198.38.94.213