Azorult_IOCs_2020-05-20_00_10.txt

#Azorult #malware #OSINT #IOC

SHA256:
6b4c217c0bdb4660db2d83a8deb9e538e801e8c275e5e1fe955497970daf24c0

IPs:
104[.]85[.]242[.]52
195[.]201[.]225[.]248
34[.]89[.]178[.]133
80[.]249[.]146[.]175
192[.]35[.]177[.]64
205[.]185[.]216[.]42




Domains:
jpnnybacj[.]ug
telete[.]in
ventillos[.]ug
vjvcnbhscv[.]ru

URL:
http://34[.]89[.]178[.]133/file_handler/file[.]php?hash=a55566019e509b607b82c3a52eab1b77ca088ab0&js=c5f8669ce56c25ecee59fbc4ee91caf6a7f8b835&callback=http://34[.]89[.]178[.]133/gate
http://34[.]89[.]178[.]133/gate/libs[.]zip
http://34[.]89[.]178[.]133/gate/log[.]php
http://34[.]89[.]178[.]133/gate/sqlite3[.]dll
http://jpnnybacj[.]ug/ac[.]exe
http://jpnnybacj[.]ug/nw[.]exe
http://ventillos[.]ug/az2[.]exe
http://ventillos[.]ug/ds2[.]exe
http://ventillos[.]ug/ds2[.]exe,
http://vjvcnbhscv[.]ru/index[.]php