Nanocore_IOCs_2019-11-08_12_41.txt

#Nanocore #malware #OSINT #IOC

MD5s:
0d07ee7cf3f3373b1cc6c7efccce0cce
332a376256bb70a809cac62fddfcc9a5
421ecf7d7990cb411b784e3c00728250
451290e9ae0511865c92e13ae166d666
46da64fcf862684004b26f8cd52bce43
489ce7bfbd95ab2d23daac49aeff4069
4a15d93bdd8733a10a340a162d4f327d
4cbfcb1018ede60a280dcde7389ad6c4
5cbdec6020e7ff90ab5b3a6de9198771
69705a50b075a7a09282743b60e65b46
6b0d34833778d73d8f520670dab7fc3c
6d22aad5c17521a7e005793fd32ba7a9
71b474eebe185eb2bf03f926d645a5c2
777d62ab4749ab031178abb9edb6bd93
7f086e3360bf886c7c11b6388342085c
8665f567c744fbbd9e859151650da747
8b2fc40654fd18cb32783d5e591826ae
908a33b8203b5ef051d1a34832139493
93c5273f7686f6a4f2beabd77d6d0199
b1753bf2faca023bf68170858b52c7a5
b5d97d9d52d50a03f2c2b45e4f1f875f
bbddeffc4177bca5f06394d76de35624
bdfc510bad54e411a0e5ed3d479fdecd
deef63b839ead0e43509108c3dd0362c
ed6971bf88083303919bf7afb7aef130
f918053b785a3c7eede28515c79ea7d2

IPs:
103[.]200[.]6[.]62
107[.]167[.]244[.]67
1[.]2[.]2[.]0
154[.]0[.]26[.]56
154[.]0[.]26[.]99
174[.]127[.]99[.]236
18[.]233[.]119[.]102
185[.]165[.]153[.]172
185[.]165[.]153[.]202
185[.]165[.]153[.]22
192[.]169[.]69[.]25
194[.]5[.]97[.]16
197[.]211[.]58[.]135
3[.]224[.]145[.]145
52[.]55[.]255[.]113
79[.]134[.]225[.]104
79[.]134[.]225[.]46
79[.]134[.]225[.]7
79[.]134[.]225[.]70
79[.]134[.]225[.]73
79[.]134[.]225[.]74
83[.]166[.]247[.]63
83[.]166[.]254[.]140
85[.]143[.]217[.]249
91[.]189[.]180[.]202
91[.]189[.]180[.]216

Domains:
arnoldgood12[.]hopto[.]org
brockmax2v2[.]hopto[.]org
cjay55[.]duckdns[.]org
danishcent[.]duckdns[.]org
deaphnote[.]ddns[.]net
fresh22[.]duckdns[.]org
haddadi23[.]hopto[.]org
harri2gud[.]duckdns[.]org
indomie[.]zapto[.]org
jeffserver[.]duckdns[.]org
mgc001[.]duckdns[.]org
smtp[.]nrkhouse[.]com
snooper113[.]duckdns[.]org
sub[.]thebest1jewels[.]waw[.]pl
waresystem[.]com
wazzy111[.]duckdns[.]org
www[.]timeapi[.]org