Malicious_IOCs_2019-08-05_10_35.txt

Malicious_IOCs_2019-08-05_10_35

Malware Famaily: #Malicious

MD5s:
87c9bbced0697b4e2f8a0e46f6c93759
bf2ecdd780f65b7bf90bee6f48fb8fc4
f5a0c4d471770a5fe93d2c221d12192a

IPs:
35[.]246[.]189[.]253


Domains:
da[.]vollar[.]ga
shopstoregame[.]com
www[.]infrusin[.]com
yulitours[.]com

URL:
http://35[.]246[.]189[.]253/file_handler2/file[.]php?hash=14540950dfcf647455852b2327e800e048b497fb&js=20da77f7a4fa2d02fdac650c1c6491b83d7722b1&callback=http://35[.]246[.]189[.]253/gate
http://35[.]246[.]189[.]253/gate/libs[.]zip
http://35[.]246[.]189[.]253/gate/log[.]php
http://35[.]246[.]189[.]253/gate/sqlite3[.]dll

#malware #OSINT #IOC