HWorm_dunihi_15-07-2019

#HWorm #Dunihi
------------------------------
15-07-2019
------------------------------
Main object- "92b505a73f423fdd05378e344a5a6a2ca9b3a105572c100ed328b5a703154c10.bin.gz"
	sha256	add8f808dda41b04f9fa339486c9609e3324f1dcc135200579cd5e76e49f47c5
	sha1	ce74130001b1a1bbe0c491d109849cc0d5c20dc6
	md5	a35aeede8cec4e3d504c54374c56a343
Dropped executable file
	sha256	C:\Users\admin\Desktop\92b505a73f423fdd05378e344a5a6a2ca9b3a105572c100ed328b5a703154c10.bin.gz	92b505a73f423fdd05378e344a5a6a2ca9b3a105572c100ed328b5a703154c10
DNS requests
	domain	hiddenmyftp.duckdns.org
Connections
	ip	159.147.61.52
HTTP/HTTPS requests
	url	http://hiddenmyftp.duckdns.org:6444/is-ready
	url	http://hiddenmyftp.duckdns.org:6444/is-enum-driver