MalwareMessiagh

Ursnif IOC

Dec 14th, 2018
1,148
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.71 KB | None | 0 0
  1. Dropping URLs:
  2. http://yulawnesse[.]com/tyclam/fressr.php?l=wygx[1-14].tkn
  3. http://nieversefa[.]com/tyclam/fressr.php?l=wygx[1-14].tkn
  4. http://acnessempo[.]com/tyclam/fressr.php?l=kanc[1-15].tkn
  5. http://duenexacch[.]com/tyclam/fressr.php?l=kanc[1-15].tkn
  6. http://villakaffeebohne[.]com/scripts/_notes/Casdijquwouhw1232.rar
  7. http://villakaffeebohne[.]com/JMsjdhuqwqw.rar
  8.  
  9. C2 :
  10. roevinguef.com
  11. kivermatio.com
  12. sokesornic.com
  13. upleimizer.org
  14. xenesciumi.com
  15. teadrophas.com
  16. garmousned.com
  17. sfernacrif.com
  18. abregeousn.com
  19.  
  20. IPs:
  21. 46.29.164.179
  22. 46.237.80.152
  23. 78.155.220.222
  24. 79.126.247.230
  25. 80.211.117.43
  26. 94.177.229.49
  27. 95.142.46.57
  28. 95.142.45.89
  29. 109.234.39.154
  30. 185.251.39.96
  31. 185.251.38.172
  32. 217.156.87.2
  33. 217.61.97.178
Add Comment
Please, Sign In to add comment