SmokeLoader_IOCs_2020-02-17_12_54.txt

#SmokeLoader #malware #OSINT #IOC

SHA256:
2e32016f5f5ee685c0d2d15e82d9351d732f2e69403a35fac860fa35c8fe192f
93d5f6166b331db8a4864c81fb5ed4188c5cedd5d25ab6d696abcc395fcb5b89

IPs:
209[.]99[.]16[.]206
62[.]149[.]210[.]9

Domains:
soapstampingmachines[.]com
www[.]mac-pro[.]it

URL:
http://soapstampingmachines[.]com/a2/macit[.]exe
http://soapstampingmachines[.]com/a/macit[.]exe
http://www[.]mac-pro[.]it/1/