Azorult_IOCs_2020-08-17_16_37.txt

#Azorult #malware #OSINT #IOC

SHA256:
52677b1100148ee3408e1be3ca3519271c17e6a6facf870c116a43f5ba9cbab0,
87588f6293633bed4bf2897950d8d5c2a2eee19e7fb829db7655c5a3feb5e456,
8bbb8fe69100550248f4663e911a16bca03432bef9112dd0924d7a9c3dae8464
e539fe1b7096b7a1966ebbe10e2361c05fd90adf8ed312406f90efe13744e5af
f0a3ca0c987a9286526e4e843de4d7fd538cd63d8f0e28bf5ee15b25fc233412,
f1fe1a01e4d15f70cd6747ca0edae16c22fe90694fc50b187250f79b2f81d646,
f4aed309cba4d61e8a9cb12fac740ba11d5f1a50c93d83c85848ba798588d9f0,
fa78ee3a1996f06a28be2943065091a0eb760373f90935ea482f0583e5bdab3c,

IPs:

217[.]8[.]117[.]77
34[.]89[.]215[.]215


Domains:
limjerome[.]ug
singaporeunited[.]ug
singsing[.]ug

URL:
hxxp://34[.]89[.]215[.]215/gate/libs[.]zip
hxxp://34[.]89[.]215[.]215/gate/log[.]php
hxxp://34[.]89[.]215[.]215/gate/sqlite3[.]dll
hxxp://limjerome[.]ug/ds1[.]exe
hxxp://limjerome[.]ug/ds2[.]exe
hxxp://limjerome[.]ug/index[.]php
hxxp://limjerome[.]ug/rc[.]exe
hxxp://singaporeunited[.]ug/os2[.]exe
hxxp://singsing[.]ug/
hxxp://singsing[.]ug/freebl3[.]dll
hxxp://singsing[.]ug/main[.]php
hxxp://singsing[.]ug/mozglue[.]dll
hxxp://singsing[.]ug/msvcp140[.]dll
hxxp://singsing[.]ug/nss3[.]dll
hxxp://singsing[.]ug/softokn3[.]dll
hxxp://singsing[.]ug/sqlite3[.]dll,
hxxp://singsing[.]ug/vcruntime140[.]dll