MalwareMessiagh

JasperLoader/Ransomware IOC

Oct 2nd, 2019
14,273
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.12 KB | None | 0 0
  1. Malicious subdomains:
  2. home.southerntransitions.net
  3. connect.southerntransitions.com
  4. home.selltokengarff.com
  5. home.ktxhome.com
  6. home.goteamrob.com
  7. twitter.crtcostruzionisrl.com
  8. my.mylifeamongthewomen.com
  9. home.hopedaybook.com
  10. getpdfreader.13stripesbrewery.com
  11. getpdfreader.lilupicks.com
  12. home.artdietfitness.com
  13. home.parkandhome.com
  14. home.mmaut.com
  15. aweb.theshotboard.info
  16. cofee.theshotboard.net
  17. home.tith.in
  18. donald.tilmonday.com
  19.  
  20. Compromised domains:
  21. 13stripesbrewery.com
  22. theshotboard.info
  23. theshotboard.net
  24. crtcostruzionisrl.com
  25. tilmonday.com
  26. lilupicks.com
  27. artdietfitness.com
  28. goteamrob.com
  29. hopedaybook.com
  30. ktxhome.com
  31. mmaut.com
  32. parkandhome.com
  33. selltokengarff.com
  34. tith.in
  35. mylifeamongthewomen.com
  36. southerntransitions.net
  37.  
  38. IPs:
  39. 31.214.157.3
  40. 185.120.144.147
  41. 185.158.248.151
  42. 194.76.224.157
  43.  
  44. Maldoc samples:
  45. https://www.virustotal.com/gui/file/24d6087d2f32e88bedde34e81bad584dfb54643557e8134d341514949c5eae95/detection
  46. https://www.virustotal.com/gui/file/e02a49ad6b6dfcfbd33ddb53725421700e6fe2acd4205c46b42409df9d58473d/detection
  47.  
  48. AnyRun sample:
  49. https://app.any.run/tasks/4c32ed32-d6f6-4f13-8a9e-b80a93903881/
Add Comment
Please, Sign In to add comment