JasperLoader to FTCODE IOC

URLs:
home.healthiestu[.]com/?need=9f5b9ee&vid=dpec6&83460
home.healthiestu[.]com/?need=6ff4040&vid=dpec6&
home.isdes[.]com/?need=9f5b9ee&vid=dpec6&1017
home.isdes[.]com/?need=6ff4040&vid=dpec6&
connect.hairsalonlongmont[.]com/juytghn
connect.simplebutmatters[.]com/uy5rhfng

Malicious subdomains:
home.healthiestu[.]com
home.isdes[.]com
geer.longmonthairsalon[.]com
connect.hairsalonlongmont[.]com
geer.onsitegm[.]com
geer.longmonthairsalon[.]com
kama.mialeeka[.]com
conn.charlotterobbins[.]com
kama.bridgerlawfirm[.]com
kama.haileywilkinson[.]com
connect.theshotboard[.]org

Maldocs:
https://www.virustotal.com/gui/file/54d6a3b1e7b9bae92cf07c9ea265bb38e857148df12db45e0475df3657eeed17/detection
https://www.virustotal.com/gui/file/ff44ad09aac900328da2f44316eef481b88e9ebb9c6b7cafba58292721c8d564/detection

AnyRun sample:
https://app.any.run/tasks/6a69590b-7855-4ea4-9520-95e731ec5569/