Azorult_IOCs_2020-06-25_23_27.txt

#Azorult #malware #OSINT #IOC

SHA256:
528564ec89a2600b4934f6f115014783276e05df63fe5959f1c4787648c6beba

IPs:
217[.]8[.]117[.]45
34[.]105[.]129[.]68

Domains:
barcla[.]ug
gadem[.]ug
telete[.]in

URL:
http://34[.]105[.]129[.]68/file_handler/file[.]php?hash=f248901bbf1c8918d3df0550027a1deddf3faecb&js=93d96516a9ce9eb43177bf2ce4dc294d834ea637&callback=http://34[.]105[.]129[.]68/gate
http://34[.]105[.]129[.]68/gate/libs[.]zip
http://34[.]105[.]129[.]68/gate/log[.]php
http://34[.]105[.]129[.]68/gate/sqlite3[.]dll
http://barcla[.]ug/ac[.]exe
http://barcla[.]ug/ds1[.]exe
http://barcla[.]ug/ds2[.]exe
http://barcla[.]ug/index[.]php
http://barcla[.]ug/nw[.]exe
http://gadem[.]ug/rac2[.]exe