IcedID IOC

IcedID URLs:
http://tcjm18emih03jpjt[.]xyz/ff.gif/
http://cxqi18kvjti03rghgr[.]xyz/ff.gif/
http://kefex18bwhh03tjwgij[.]xyz/ff.gif/
http://oxrzy18gfhz03egxnar[.]xyz/ff.gif/
http://jeqnq18vdhkmb03bzva[.]xyz/ff.gif/
http://lem18iuru03vwvqwt[.]xyz/ff.gif/
http://wquwb16swlxr03miuell[.]com/summer.gif
http://uqw16atsxge03cbwwx[.]com/summer.gif
http://igeq18tumr03njyxn[.]xyz/ff.gif
http://kefex18bwhh03tjwgij[.]xyz/ff.gif

Other IceID domains (some already weaponized, some in staging phase):
amr16pzcp03omerd.com
amr16pzcp03omerd.xyz
cxqi18kvjti03rghgr.xyz
cyh26wcekai02atpeax.com
dzw10jpcgj03fckc.com
fqzzj16gndioz03mxadr.com
ftkaq03ihfbh03rehx.com
gbza26rngn02bekll.com
hei03tfxv03mahl.com
igeq18tumr03njyxn.xyz
ihjpn03sijjl03dtmtr.com
jam03iofwv03jniedf.com
jeqnq18vdhkmb03bzva.xyz
kefex18bwhh03tjwgij.xyz
klhlh16zldwun03vlpq.com
kyvws03ndah03hecon.com
lem18iuru03vwvqwt.xyz
nym18ltpsyu03hdabh.xyz
oxrzy18gfhz03egxnar.xyz
rdraj16rwjw03xnli.com
sal03gicu03qcwtif.com
sxu18ppjk03ebhxaj.xyz
tcjm18emih03jpjt.xyz
uqw16atsxge03cbwwx.com
usy15wycqme03dymh.xyz
vdk10pfsny03tzfva.com
vpu03jivmm03qncgx.com
vyhml26anpfyb02aqsehz.com
wquwb16swlxr03miuell.com
xgka03stox03cloeqz.com
xjw10whta03ytgdi.com
yar03jmtvr03jtqg.com
ykv16cmtign03mfeen.com

IP:
35.228.48.27