SHARE
TWEET

Vidar_IOCs_2019-12-09_12_52.txt

paladin316 Dec 9th, 2019 157 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #Vidar #malware #OSINT #IOC
  2.  
  3. SHA256:
  4. 1c275c53f83f2aa4916dfd47439fae8740907718dc9fa41604107a14d39621aa
  5. 40ebd67ff8278c9efc6aa90e9bd4221ed9155369c90ba25bfe699c2d418f6610
  6. e497bd74a134b10d6bd5385cd59fe4c60758bc5135c970422cb868e6f801ce02
  7. ee0a4e00992382159296ee165789910fc41b1bfebd702a724e783300e72ba027
  8.  
  9. IPs:
  10. 104[.]114[.]77[.]146
  11. 104[.]114[.]77[.]155
  12. 104[.]123[.]71[.]136
  13. 104[.]123[.]71[.]144
  14. 104[.]123[.]71[.]155
  15. 169[.]239[.]129[.]65
  16. 185[.]244[.]149[.]55
  17. 192[.]35[.]177[.]64
  18. 198[.]54[.]115[.]179
  19. 205[.]185[.]216[.]10
  20. 208[.]95[.]112[.]1
  21. 72[.]247[.]211[.]138
  22. 72[.]247[.]211[.]146
  23. 8[.]208[.]10[.]193
  24. 8[.]209[.]74[.]215
  25.  
  26. Domains:
  27. 789456123[.]monster
  28. bitbucket[.]org
  29. legion17[.]net
  30. lowupdate3[.]top
  31. lowupdate4[.]top
  32. softupdate1[.]me
  33. softupdate2[.]me
  34. xylolle[.]com
  35. ybookfli[.]net
  36.  
  37. URL:
  38. http://789456123[.]monster/setup-ydm[.]exe
  39. http://bitbucket[.]org/itself-spring/down/downloads/setup_c[.]exe
  40. http://bitbucket[.]org/miceants/files/downloads/setup_c[.]exe
  41. http://bitbucket[.]org/presscircle/cloud/downloads/setup_c[.]exe
  42. http://legion17[.]net/legion17/welcome
  43. http://lowupdate3[.]top/gate1[.]php?a=bbed3e55656ghf02-0b41-11e3-8249id=2
  44. http://lowupdate3[.]top/gate1[.]php?a=true
  45. http://lowupdate4[.]top/test/eu/1[.]exe
  46. http://lowupdate4[.]top/test/eu/2[.]exe
  47. http://softupdate1[.]me/gate1[.]php?a=bbed3e55656ghf02-0b41-11e3-8249id=2
  48. http://softupdate1[.]me/gate1[.]php?a=true
  49. http://softupdate2[.]me/test/eu/1[.]exe
  50. http://xylolle[.]com/
  51. http://xylolle[.]com/237
  52. http://xylolle[.]com/freebl3[.]dll
  53. http://xylolle[.]com/mozglue[.]dll
  54. http://xylolle[.]com/msvcp140[.]dll
  55. http://xylolle[.]com/nss3[.]dll
  56. http://xylolle[.]com/softokn3[.]dll
  57. http://xylolle[.]com/vcruntime140[.]dll
  58. http://ybookfli[.]net/
  59. http://ybookfli[.]net/237
  60. http://ybookfli[.]net/freebl3[.]dll
  61. http://ybookfli[.]net/mozglue[.]dll
  62. http://ybookfli[.]net/msvcp140[.]dll
  63. http://ybookfli[.]net/nss3[.]dll
  64. http://ybookfli[.]net/softokn3[.]dll
  65. http://ybookfli[.]net/vcruntime140[.]dll
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top