Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #Trickbot GTAG: #ono60
- Zip (Filename: `statement. #<0-9>.zip`) -> WScript (Filename: `<0-9>-<0-9>.js`) -> CMD -> PowerShell -> hXXp://rareland[.]in/rare/rarleworld.php'
- Memory String references to bdns.io/r/safetrust.bazar
- https://5.34.178.126/ono60
- https://5.149.253.99/ono60
- https://27.147.173.227:449/ono60
- https://36.94.33.102:449/ono60
- https://45.127.222.8:449/ono60
- https://45.138.158.32/ono60
- https://45.148.120.195/ono60
- https://51.89.177.20/ono60
- https://82.146.46.220/ono60
- https://86.104.194.116/ono60
- https://88.247.212.56:449/ono60
- https://92.62.65.163:449/ono60
- https://103.36.48.103:449/ono60
- https://103.87.169.150:449/ono60
- https://103.130.114.106:449/ono60
- https://103.221.254.102:449/ono60
- https://107.174.196.242/ono60
- https://110.232.249.13:449/ono60
- https://112.109.19.178:449/ono60
- https://121.101.185.130:449/ono60
- https://158.181.155.153:449/ono60
- https://177.190.69.162:449/ono60
- https://180.211.95.14:449/ono60
- https://180.211.170.214:449/ono60
- https://183.81.154.113:449/ono60
- https://185.164.32.214/ono60
- https://185.164.32.215/ono60
- https://185.205.209.241/ono60
- https://186.159.8.218:449/ono60
- https://187.109.119.99:449/ono60
- https://194.5.249.174/ono60
- https://195.123.240.252/ono60
- https://195.123.241.90/ono60
- https://195.123.241.187/ono60
- https://198.46.198.139/ono60
- https://200.116.159.183:449/ono60
- https://200.116.232.186:449/ono60
- https://212.22.70.65/ono60
- https://220.247.174.12:449/ono60
Add Comment
Please, Sign In to add comment
