MalwareMessiagh

Ursnif IOC

Dec 3rd, 2018
1,294
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.68 KB | None | 0 0
  1. Dropping domains and IPs:
  2. http://bawknogeni.com/KHZ/diuyz.php?l=leaz[1-13].tkn
  3. http://yancommato.com/KHZ/diuyz.php?l=leaz[1-15].tkn
  4. http://navectrece.com/SXC/ptyie.php?l=geor[1-13].tkn
  5. http://wizoidiazi.com/SXC/ptyie.php?l=geor[1-13].tkn
  6. http://192.162.244.29/pqwiehaisndqjwdnwjq.rar
  7. http://95.181.198.188/pqwiehaisndqjwdnwjq.rar
  8. http://185.120.58.252/ioqwjdqnwdas.rar
  9.  
  10. C2 domains:
  11. seweablosi.com
  12. rutratrang.comT
  13. zweideckei.com
  14. hulleitter.com
  15. neuzigehme.com
  16. mautergase.com
  17. pyterriuma.com
  18. psardernes.com
  19. ulefieskil.com
  20. uvuladitur.com
  21. voklrfygegergra.com
  22. voklzaflrrra.com
  23.  
  24. IPs:
  25. 83.166.247.211
  26. 95.181.198.186
  27. 95.181.198.188
  28. 95.181.198.189
  29. 95.181.198.191
  30. 192.162.244.29
Add Comment
Please, Sign In to add comment