Nanocore_IOCs_2020-03-12_13_02.txt

#Nanocore #malware #OSINT #IOC

SHA256:
10801718ce01eddbf5dbf5ecbd645a838a042c26042fd467394c8a008485822a
a8aa2b606ff19f1b7de24d1d89250ccfc40a2263bf227a43fa8bd4c92593b1a4

IPs:
88[.]99[.]66[.]31
91[.]215[.]170[.]202
95[.]100[.]156[.]43
95[.]100[.]156[.]67
95[.]181[.]198[.]200

Domains:
adikaremix[.]duckdns[.]org
spartvishltd[.]com

URL:
http://35[.]246[.]80[.]69/file_handler/file[.]php?hash=366dd2ad1c36ead5ae6555cf114f7b4527a25097&js=e3b632e50eedac6a511fdc7bc162aa80d7d35330&callback=http://35[.]246[.]80[.]69/gate
http://35[.]246[.]80[.]69/file_handler/file[.]php?hash=3e7bb294d630d5c62b4a9904b4647f8d01ac78ff&js=fa841ba9c34dea62e6c249427dcb57f64d21f5c1&callback=http://35[.]246[.]80[.]69/gate
http://35[.]246[.]80[.]69/file_handler/file[.]php?hash=ff30849721639dfbf996a0e51dec57dbe7171b5f&js=9413b4a746c1ad12a6e6826957e4254afbcf6b16&callback=http://35[.]246[.]80[.]69/gate
http://35[.]246[.]80[.]69/gate/libs[.]zip
http://35[.]246[.]80[.]69/gate/log[.]php
http://35[.]246[.]80[.]69/gate/sqlite3[.]dll
http://spartvishltd[.]com/file1[.]exe
http://spartvishltd[.]com/file2[.]exe
http://spartvishltd[.]com/file3[.]exe
http://spartvishltd[.]com/file4[.]exe
http://spartvishltd[.]com/file5[.]exe