Remcos_IOCs_2019-08-21_12_28.txt

Remcos_IOCs_2019-08-21_12_28

Malware Famaily: Remcos

MD5s:
0613946fc944c1ee4ff99d995e6d2fbb
0c3755dfc856fff98807c041c0171115
214c35500a1154672ca73a228d035188
31111857efb3138eb8f2b1146656d753
65753975d115fae25f35fb9deb2cddbb
95829108b0e5f9ebeb15ca5ae1a9ad5d
aff397aec5719af3f28e070f2c547fda
d5581c9db64b399c7d0cdb3f7b78673b
d7a97204f3bf97f09e34218e2f380dd5

IPs:
192[.]34[.]109[.]202

Domains:
daya4659[.]ddns[.]net
pecunia11223344[.]warzonedns[.]com

URL:
http://acroipm2[.]adobe[.]com/19/rdr/ENU/win/nooem/none/consumer/message[.]zip
http://www[.]msftncsi[.]com/ncsi[.]txt

#malware #OSINT #IOC
#Remcos