Azorult_IOCs_2020-08-06_13_46.txt

Azorult_IOCs_2020-08-06_13_46

Malware Famaily: Azorult

SHA256:
286c2eb8755215619d8cb48cc884091251729d5925b74444fe3b62c2c1a5acb5

IPs:
195.201.225.248
34.65.10.107
217.8.117.77

Domains:
fgdjhksdfsdxcbv[.]ru
karimgoussd[.]ug
mantis[.]co[.]ug
mantis[.]ug
michaeldiamantis[.]ug
telete[.]in

URL:
http://34[.]65[.]10[.]107/file_handler4/file[.]php?hash=0e025c9c7179342addcc8db1ba303c52c48b87fc&js=4af86ed09af809cc11ffdc6165dfc322f1ffec1b&callback=http://34[.]65[.]10[.]107/gate,
http://34[.]65[.]10[.]107/file_handler4/file[.]php?hash=fe192baa03e9296dad365d2375e918ef54adddd4&js=3734a79b0a68eb2d8b189223e8c68d68436e1fc7&callback=http://34[.]65[.]10[.]107/gate,
http://34[.]65[.]10[.]107/gate/libs[.]zip,
http://34[.]65[.]10[.]107/gate/log[.]php,
http://34[.]65[.]10[.]107/gate/sqlite3[.]dll,
http://mantis[.]co[.]ug/ac[.]exe,
http://mantis[.]co[.]ug/ds1[.]exe,
http://mantis[.]co[.]ug/ds2[.]exe,
http://mantis[.]co[.]ug/rc[.]exe,
http://mantis[.]ug/,
http://mantis[.]ug/freebl3[.]dll,
http://mantis[.]ug/main[.]php,
http://mantis[.]ug/mozglue[.]dll,
http://mantis[.]ug/msvcp140[.]dll,
http://mantis[.]ug/nss3[.]dll,
http://mantis[.]ug/softokn3[.]dll,
http://mantis[.]ug/sqlite3[.]dll,
http://mantis[.]ug/vcruntime140[.]dll,
http://michaeldiamantis[.]ug/ac[.]exe,
http://michaeldiamantis[.]ug/ds1[.]exe,
http://michaeldiamantis[.]ug/ds2[.]exe,
http://michaeldiamantis[.]ug/index[.]php,
http://michaeldiamantis[.]ug/rc[.]exe,

#Azorult #malware #OSINT #IOC