API tools faq
paste
ExecuteMalware

2021-02-08 Likely Ave Maria RAT IOCs

ExecuteMalware
Feb 8th, 2021
4,221
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.48 KB | None | 0 0
raw download clone embed print report
  1. THREAT ATTRIBUTION: LIKELY AVEMARIA RAT
  2.  
  3. SUBJECTS OBSERVED
  4. Request quotation for SPARE PARTS provision
  5.  
  6. SENDERS OBSERVED
  7. [email protected]
  8.  
  9. MALDOC FILE HASHES
  10. PO 213409701.xlsx
  11. a17143ea703ed4fef934fa1d8c8c413c
  12.  
  13. SPARE PARTS Drawing.xlsx
  14. a17143ea703ed4fef934fa1d8c8c413c
  15.  
  16. AVE MARIA PAYLOAD URLS
  17. https://cutt.ly/Fkz48wO
  18. http://stdykungcommunicstcd.dns.army/kungdoc/winlog.exe
  19.  
  20. AVE MARIA PAYLOAD FILE HASHES
  21. winlog.exe
  22. e04e30ce82c10d8e4fe03ed0cdfa381a
  23.  
  24. AVE MARIA C2
  25. N/A
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!