Shade_IOCs_2020-05-18_22_16.txt

#Shade #malware #OSINT #IOC

SHA256:
6a4d4775de44977d9d3e3797822ed0fbc131e9132c29e1230d80e992b4f08e36

IPs:
83[.]166[.]249[.]191


URL:
http://83[.]166[.]249[.]191/b0/b/check?ver=0[.]9&os=%57%69%6e%64%6f%77%73%20%33%32%2d%62%69%74&binary=1&token=41&host=&run_time=0&once=1
http://83[.]166[.]249[.]191/b0/b/check?ver=0[.]9&os=%57%69%6e%64%6f%77%73%20%33%32%2d%62%69%74&binary=1&token=41&host=&run_time=14
http://83[.]166[.]249[.]191/b0/upload/shellfiles/32/[.]exe