Ursnif IOC

Ursnif/Gozi:
http://gontaseopa[.]site/fk/f2.php
http://eroutks[.]co/fk/f2.php
http://jeudnsju[.]xyz/fk/f2.php
http://jeudnsjkd[.]xyz/fk/f2.php
http://joskaejw[.]club/372873/korp.exe
http://joskaejw[.]club/372873/corpo1.dll
http://jeuisjr[.]xyz/fk/f2.php

More domains:
bluewaters.space
djeudnsj.xyz
eroutks.co
euiobol.xyz
gontaseesl.website
gontaseonar.site
gontaseopa.site
gontaseopa.website
heuirnst.space
heuirnst.website
jeudnsjkd.xyz
jeudnsju.xyz
jeuisjr.xyz
joskaejw.club
loperatys.site
loreteo.xyz
loretoi.xyz
ujaioep.site
ujaioep.website

C2:
buismashallah.at
shoshanna.at