Azorult_IOCs_2019-12-05_12_42.txt

#Azorult #malware #OSINT #IOC

MD5s:
0c55a6f232fd0670a66eb1eec42efe22
10257c4bd955c989e6a8f9c713726b72
14d2dbb3d83182a720d609c021d65bfd
3a33277ee4e4d0e02e636c0c4a738b16
a1e08b9606f07d719636172b7d7dfcad
f23a338135c92af8c0e24461aafce0fc

IPs:
178[.]208[.]83[.]42
209[.]127[.]19[.]34
45[.]13[.]252[.]111
5[.]34[.]177[.]120

Domains:
degavu[.]esy[.]es
kitchenraja[.]in
umka[.]elitkom[.]uz
worldatdoor[.]in

URL:
http://5[.]34[.]177[.]120/index[.]php,
http://degavu[.]esy[.]es/index[.]php,
http://kitchenraja[.]in/cgi-sys/suspendedpage[.]cgi,
http://kitchenraja[.]in/fort/32/index[.]php,
http://umka[.]elitkom[.]uz/index[.]php,
http://umka[.]elitkom[.]uz/salesoft/files/6[.]exe,
http://worldatdoor[.]in/links/32/index[.]php,