Ursnif_IOCs_2019-07-22_23_42.txt

Ursnif_IOCs_2019-07-22_23_42

Malware Famaily: #Ursnif

MD5s:
6cc70fb7b014fe253989338d5008381d
a85132af1b5651472eb4ad093e1bb0f5

IPs:
199[.]204[.]213[.]10
209[.]141[.]47[.]33


Domains:
bookyeti[.]com
otnet[.]xyz

URL:
http://bookyeti[.]com/img/3001[.]exe

http://otnet[.]xyz/
http://otnet[.]xyz/141
http://otnet[.]xyz/freebl3[.]dll
http://otnet[.]xyz/freebl3[.]dll?ddosprotected=1
http://otnet[.]xyz/mozglue[.]dll
http://otnet[.]xyz/msvcp140[.]dll
http://otnet[.]xyz/nss3[.]dll
http://otnet[.]xyz/softokn3[.]dll
http://otnet[.]xyz/vcruntime140[.]dll

#malware #OSINT #IOC
#Ursnif