Obfsobjdat_IOCs_2020-05-20_22_50.txt

#Exploit.RTF-ObfsObjDat.Gen #malware #OSINT #IOC

SHA256:
356b414dbf8b7d60d314fcc63fb36c0326ad7057113cea0fe9f9e023c6ec117b
4f51da0a7034a3b491bf21d56896d2cc97f5f240911abfaeacfe73d80bd84a34

IPs:
111[.]90[.]138[.]158
103[.]99[.]2[.]49


Domains:
cbaaat-calofiniaantidrugdepatmentoldtgg[.]duckdns[.]org
kungsb2unlimitedseverfortsdy4epidemicrgb[.]duckdns[.]org

URL:
http://cbaaat-calofiniaantidrugdepatmentoldtgg[.]duckdns[.]org/cbaatdoc/regasm[.]exe
http://kungsb2unlimitedseverfortsdy4epidemicrgb[.]duckdns[.]org/kung2doc/winlog[.]exe