07/14/2020: ZLoader Campaign IOCs

https://twitter.com/DynamicAnalysis/status/1283119297229991936

#ZLoader #malspam IOCs from 07/14/2020.

Downloader URLs:
https://australian-boots.nl/wp-keys.php
https://current9.com.ng/wp-keys.php
https://hotel-city.net/wp-keys.php
https://kinostanbulfilm.com/wp-keys.php

C2s:
http://naochen.top/wp-parsing.php
http://raoxian.top/wp-parsing.php
http://shaoshun.top/wp-parsing.php
http://thaiblind.com/wp-parsing.php
https://tremmecontina.ga/wp-parsing.php
http://wiremeshseller.com/wp-parsing.php
http://zameng.top/wp-parsing.php
https://aserzietronun.tk/wp-parsing.php
http://zhuangque.top/wp-parsing.php

XLS Sample:
https://app.any.run/tasks/efb35a41-8151-40a6-9f39-6b367e2a6ae4/#

DLL Sample:
https://app.any.run/tasks/8e44b576-0867-4cb5-8cf6-a271c8577b47