paladin316

Vidar_IOCs_2019-12-09_12_52.txt

Dec 9th, 2019
1,121
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #Vidar #malware #OSINT #IOC
  2.  
  3. SHA256:
  4. 1c275c53f83f2aa4916dfd47439fae8740907718dc9fa41604107a14d39621aa
  5. 40ebd67ff8278c9efc6aa90e9bd4221ed9155369c90ba25bfe699c2d418f6610
  6. e497bd74a134b10d6bd5385cd59fe4c60758bc5135c970422cb868e6f801ce02
  7. ee0a4e00992382159296ee165789910fc41b1bfebd702a724e783300e72ba027
  8.  
  9. IPs:
  10. 104[.]114[.]77[.]146
  11. 104[.]114[.]77[.]155
  12. 104[.]123[.]71[.]136
  13. 104[.]123[.]71[.]144
  14. 104[.]123[.]71[.]155
  15. 169[.]239[.]129[.]65
  16. 185[.]244[.]149[.]55
  17. 192[.]35[.]177[.]64
  18. 198[.]54[.]115[.]179
  19. 205[.]185[.]216[.]10
  20. 208[.]95[.]112[.]1
  21. 72[.]247[.]211[.]138
  22. 72[.]247[.]211[.]146
  23. 8[.]208[.]10[.]193
  24. 8[.]209[.]74[.]215
  25.  
  26. Domains:
  27. 789456123[.]monster
  28. bitbucket[.]org
  29. legion17[.]net
  30. lowupdate3[.]top
  31. lowupdate4[.]top
  32. softupdate1[.]me
  33. softupdate2[.]me
  34. xylolle[.]com
  35. ybookfli[.]net
  36.  
  37. URL:
  38. http://789456123[.]monster/setup-ydm[.]exe
  39. http://bitbucket[.]org/itself-spring/down/downloads/setup_c[.]exe
  40. http://bitbucket[.]org/miceants/files/downloads/setup_c[.]exe
  41. http://bitbucket[.]org/presscircle/cloud/downloads/setup_c[.]exe
  42. http://legion17[.]net/legion17/welcome
  43. http://lowupdate3[.]top/gate1[.]php?a=bbed3e55656ghf02-0b41-11e3-8249id=2
  44. http://lowupdate3[.]top/gate1[.]php?a=true
  45. http://lowupdate4[.]top/test/eu/1[.]exe
  46. http://lowupdate4[.]top/test/eu/2[.]exe
  47. http://softupdate1[.]me/gate1[.]php?a=bbed3e55656ghf02-0b41-11e3-8249id=2
  48. http://softupdate1[.]me/gate1[.]php?a=true
  49. http://softupdate2[.]me/test/eu/1[.]exe
  50. http://xylolle[.]com/
  51. http://xylolle[.]com/237
  52. http://xylolle[.]com/freebl3[.]dll
  53. http://xylolle[.]com/mozglue[.]dll
  54. http://xylolle[.]com/msvcp140[.]dll
  55. http://xylolle[.]com/nss3[.]dll
  56. http://xylolle[.]com/softokn3[.]dll
  57. http://xylolle[.]com/vcruntime140[.]dll
  58. http://ybookfli[.]net/
  59. http://ybookfli[.]net/237
  60. http://ybookfli[.]net/freebl3[.]dll
  61. http://ybookfli[.]net/mozglue[.]dll
  62. http://ybookfli[.]net/msvcp140[.]dll
  63. http://ybookfli[.]net/nss3[.]dll
  64. http://ybookfli[.]net/softokn3[.]dll
  65. http://ybookfli[.]net/vcruntime140[.]dll
RAW Paste Data