Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- DanaBot Gains Popularity and Targets US Organizations in Large Campaigns
- IOC Type Description
- 288615e28672e1326231186230f2bc74ea84191745cc40369d49bf385bf9669b SHA256 DanaBot Loader (affiliate ID 8)
- 45.77.96.198 IP Address DanaBot Loader C&C
- 57cac2bdc44415c6737149bda8fc4e53adfab7d35cac3de94ced9d6675f1c5db SHA256 DanaBot Main x64 (affiliate ID 8)
- 1184c7936c82f1718f9e547be4a8eeaa1c16c2f16790e2b5ae66a870a17b7454 SHA256 DanaBot Main x86 (affiliate ID 8)
- 149.154.152.64 IP Address DanaBot Main C&C
- 149.154.157.220 IP Address DanaBot Main C&C
- 158.255.215.31 IP Address DanaBot Main C&C
- 178.209.51.227 IP Address DanaBot Main C&C
- 37.235.53.232 IP Address DanaBot Main C&C
- 45.77.231.138 IP Address DanaBot Main C&C
- 45.77.51.69 IP Address DanaBot Main C&C
- 45.77.54.180 IP Address DanaBot Main C&C
- 45.77.96.198 IP Address DanaBot Main C&C
- Hancitor Campaign IOCs:
- genesislouisville[.]com Domain Link to macro document
- genesisofdallas[.]com Domain Link to macro document
- genesisoflouisville[.]com Domain Link to macro document
- genesisofportland[.]com Domain Link to macro document
- kccmanufacturing[.]com Domain Link to macro document
- louisvillegenesis[.]com Domain Link to macro document
- louisvilleride[.]com Domain Link to macro document
- motionscent[.]com Domain Link to macro document
- oxmoorautomall[.]com Domain Link to macro document
- ridesharelouisville[.]com Domain Link to macro document
- 6dcf41dd62e909876e9ef10bd376ea3a6765c2ecb281844fc4bebd70bfebeb27 SHA256 Macro document
- c82081823ba468ad2d10c4beca700a7bf0ba82b371bc57286cc721e271019080 SHA256 Hancitor
- hxxp://tontheckcatan[.]ru/4/forum[.]php URL Hancitor C&C
- hxxp://onthethatsed[.]ru/4/forum[.]php URL Hancitor C&C
- hxxp://kitezona[.]ru/wp-content/plugins/redirection/modules/1 URL Hancitor Task
- hxxp://xn--hllo-bpa[.]com/guestlist/1 URL Hancitor Task
- hxxp://music-open[.]com/1 URL Hancitor Task
- hxxp://allnicolerichie[.]com/wp-content/plugins/ubh/1 URL Hancitor Task
- hxxp://mpressmedia[.]net/wp-content/plugins/ubh/1 URL Hancitor Task
- hxxp://bwc[.]ianbell[.]com/wp-content/plugins/ubh/1 URL Hancitor Task
- hxxp://kitezona[.]ru/wp-content/plugins/redirection/modules/2 URL Hancitor Task
- hxxp://xn--hllo-bpa[.]com/guestlist/2 URL Hancitor Task
- hxxp://music-open[.]com/2 URL Hancitor Task
- hxxp://allnicolerichie[.]com/wp-content/plugins/ubh/2 URL Hancitor Task
- hxxp://mpressmedia[.]net/wp-content/plugins/ubh/2 URL Hancitor Task
- hxxp://bwc[.]ianbell[.]com/wp-content/plugins/ubh/2 URL Hancitor Task
- hxxp://kitezona[.]ru/wp-content/plugins/redirection/modules/4 URL Hancitor Task
- hxxp://xn--hllo-bpa[.]com/guestlist/4 URL Hancitor Task
- hxxp://music-open[.]com/4 URL Hancitor Task
- hxxp://allnicolerichie[.]com/wp-content/plugins/ubh/4 URL Hancitor Task
- hxxp://mpressmedia[.]net/wp-content/plugins/ubh/4 URL Hancitor Task
- hxxp://bwc[.]ianbell[.]com/wp-content/plugins/ubh/4 URL Hancitor Task
- 9a816d9626f870617400df384d653b02a15ad940701b4fb2296e1abe04d3777f SHA256 DanaBot
- hxxp://tontheckcatan[.]ru/mlu/forum[.]php URL Pony C&C
- hxxp://onthethatsed[.]ru/mlu/forum[.]php URL Pony C&C
- hxxp://tontheckcatan[.]ru/d2/about[.]php URL Pony C&C
- hxxp://onthethatsed[.]ru/d2/about[.]php URL Pony C&C
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
