Azorult_IOCs_2020-06-10_22_45.txt

#Azorult #malware #OSINT #IOC

SHA256:
0d4623e27386fcbb4755a97f2552b141f7ffd67b56feea2768c49920bd0b081d

IPs:

195[.]201[.]225[.]248
217[.]8[.]117[.]45
34[.]105[.]129[.]68


Domains:
raymondjaon[.]ug
telete[.]in
troygilletc[.]ug
troygillet[.]ug

URL:
http://34[.]105[.]129[.]68/file_handler/file[.]php?hash=bcef214b516fd7a1defd84d4d483c887551df2d0&js=b28951a5f1bb773cf103a7b3b4048e051d254504&callback=http://34[.]105[.]129[.]68/gate
http://34[.]105[.]129[.]68/file_handler/file[.]php?hash=d7c818d8d3fd2885fc02d2b41ec61287176f4bf4&js=cc952b845c571e4a4169628bed04a5c95f218ea9&callback=http://34[.]105[.]129[.]68/gate
http://34[.]105[.]129[.]68/gate/libs[.]zip
http://34[.]105[.]129[.]68/gate/log[.]php
http://34[.]105[.]129[.]68/gate/log[.]php,
http://34[.]105[.]129[.]68/gate/sqlite3[.]dll
http://raymondjaon[.]ug/index[.]php
http://troygilletc[.]ug/ds2[.]exe
http://troygilletc[.]ug/nw[.]exe
http://troygillet[.]ug/rac2[.]exe