Msoffice_IOCs_2019-07-22_23_42.txt

Msoffice_IOCs_2019-07-22_23_42

Malware Famaily: Msoffice

MD5s:
3aa14486d8eeb3a04a9d57d7e25dac75
63f6ff586e710f0106b297917bf82014

IPs:
103[.]229[.]72[.]62
104[.]115[.]150[.]73
104[.]18[.]24[.]243
104[.]18[.]25[.]243
104[.]24[.]122[.]173
104[.]24[.]123[.]173
152[.]199[.]4[.]33
52[.]109[.]20[.]4
52[.]109[.]2[.]14
65[.]52[.]98[.]231
72[.]21[.]91[.]29
96[.]17[.]4[.]23

Domains:

URL:
http://coldcerealfordinner[.]com/wp-admin/js/12jan/charley/Chaly[.]exe
http://coldcerealfordinner[.]com/wp-admin/js/12jan/Ojan/Jan[.]exe
http://mscrl[.]microsoft[.]com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201[.]crl
http://ocsp[.]comodoca[.]com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSTufqHinruS%2FP9Wi1XSjRRzoTLfAQUfgNaZUFrp34K4bidCOodjh1qx2UCEC4BJRXilBJzt%2BjULTDTeVo%3D
http://ocsp[.]comodoca[.]com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEQDwHUvue3yjezwFZqwFlyRY
http://ocsp[.]digicert[.]com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D
http://ocsp[.]msocsp[.]com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D
http://ocsp[.]usertrust[.]com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D

#malware #OSINT #IOC
#Msoffice