IOCs-zloader

IOCs-zloader
https://documents.trendmicro.com/assets/txt/IOCs-zloader-campaigns-at-a-glance.txt

SHA-256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---------------------------------------------

URL
hxxps://iqowijsdakm[.]com/gate[.]php
hxxps://wiewjdmkfjn[.]com/gate[.]php
hxxps://dksaoidiakjd[.]com/gate[.]php
hxxps://iweuiqjdakjd[.]com/gate[.]php
hxxps://yuidskadjna[.]com/gate[.]php
hxxps://olksmadnbdj[.]com/gate[.]php
hxxps://odsakmdfnbs[.]com/gate[.]php
hxxps://odsakjmdnhsaj[.]com/gate[.]php
hxxps://odjdnhsaj[.]com/gate[.]php
hxxps://odoishsaj[.]com/gate[.]php
hxxps://holacast[.]com/post[.]php
hxxps://homeloansadvisor[.]in/post[.]php
hxxps://hoteldonalala[.]com[.]mx/post[.]php
hxxps://hotimobiliaria[.]com[.]br/post[.]php
hxxps://hrdgschool[.]com/post[.]php
hxxps://huloolcreations[.]com/post[.]php
hxxps://hyundainhatrang[.]vn/post[.]php
hxxps://iaikotasemarang[.]id/post[.]php
hxxps://jiaayanu[.]com/post[.]php
hxxps://investinszeklerland[.]eu/post[.]php
hxxps://iqs-sac[.]com/post[.]php
hxxps://jciems[.]in/post[.]php
hxxps://jinnahofficersschool[.]com/post[.]php
hxxps://kancagh[.]com/post[.]php
hxxps://electrabeautytools[.]com/post[.]php
hxxps://elexitodelonatural[.]com/post[.]php
hxxps://elmaaref[.]com/post[.]php
hxxps://enrichuae[.]com/post[.]php
hxxps://www[.]epsilon-me[.]com/post[.]php
hxxps://codilmeosoterti[.]tk/post[.]php
hxxps://dazzlingnight[.]com/post[.]php
hxxps://rylaconfxilo[.]tk/post[.]php
hxxps://seaofsilver[.]com/post[.]php
hxxps://kenthehafana[.]tk/post[.]php
hxxps://bentalks[.]co[.]ke/post[.]php
hxxps://karhandlafarm[.]com/post[.]php
hxxps://www[.]moinamakeup[.]com/post[.]php
hxxps://miramaminerals[.]com/post[.]php
hxxps://fermin[.]pe/post[.]php
hxxps://talk2point[.]com/post[.]php
hxxps://enpikilenlya[.]gq/post[.]php
hxxps://sanfilippowholesale[.]ca/post[.]php
hxxps://veprotech[.]com/post[.]php
hxxps://globalgroots[.]com/post[.]php
hxxps://silicontradewind[.]com/post[.]php
hxxps://dhyanalingagranites[.]in/post[.]php
hxxps://onushondhanbarta[.]com/post[.]php
hxxps://avcity[.]in/post[.]php
hxxps://docapiridelli[.]ml/post[.]php
hxxps://earfetti[.]com/post[.]php
hxxps://evalynews[.]com/post[.]php
hxxps://zeistatwalk[.]tk/post[.]php
hxxps://spiraninendreamneu[.]tk/post[.]php
hxxps://gadgetswolf[.]com/post[.]php
hxxps://homesoapmolds[.]com/post[.]php
hxxps://govemedico[.]tk/post[.]php
hxxps://vidhyashram[.]edu[.]in/post[.]php
hxxps://carmeta-ampuh[.]com/post[.]php
hxxps://bestarticleblog[.]com/post[.]php
hxxps://alahsateam[.]com/post[.]php
hxxps://pyggroup[.]com[.]pe/post[.]php
hxxps://perlisisacsiograv[.]tk/post[.]php
hxxps://sadnan[.]com/post[.]php
hxxps://www[.]isds[.]com[.]my/post[.]php
hxxps://nawirifarm[.]co[.]ke/post[.]php
hxxps://dev01[.]perdiscoo[.]com/post[.]php
hxxps://ingenieriaoasisdebc[.]com/post[.]php
hxxps://brinitezcresan[.]gq/post[.]php
hxxps://groceryasian[.]com/post[.]php
hxxps://forteanhub[.]com/post[.]php
hxxps://conssapratigdevi[.]tk/post[.]php
hxxps://actes-etatcivil[.]com/post[.]php
hxxps://ankarakreatif[.]com/post[.]php
hxxps://www[.]ramazanyildiz[.]net/post[.]php
hxxps://hispaniaeng[.]com/post[.]php
hxxps://www[.]ifdd[.]francophonie[.]org/post[.]php
hxxps://tiodeitidampheater[.]tk/post[.]php
hxxps://likesacademy[.]com/post[.]php
hxxps://cobussaunders[.]co[.]za/post[.]php
hxxps://olisvcmc[.]com/post[.]php
hxxps://impactegypte[.]com/post[.]php
hxxps://nuevoyucatan[.]com[.]mx/post[.]php
hxxps://rioprelopamer[.]tk/post[.]php
hxxps://notsweets[.]net/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://olpons[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://karamelliar[.]org/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://dogrunn[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://azoraz[.]net/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://www[.]businessinsurancelaw[.]com/wp-punch[.]php
hxxps://squire[.]ae/wp-punch[.]php
hxxps://lamun[.]pk/wp-punch[.]php
hxxps://www[.]rcclabbd[.]com/wp-punch[.]php
hxxps://thecype[.]com/wp-punch[.]php
hxxps://theterteboltallbrow[.]tk/wp-smarts[.]php
hxxps://nature4health[.]id/wp-punch[.]php
hxxps://maschuquisaca[.]tk/wp-punch[.]php
hxxps://serproimsas[.]com/wp-punch[.]php
hxxps://agrospas[.]co[.]rs/wp-punch[.]php
hxxps://fnxcrypto[.]com/server[.]php
hxxps://lywakelireal[.]ga/wp-smarts[.]php
hxxps://www[.]alhasanatbooks[.]com/reader[.]php
hxxps://aflim[.]org[.]ng/wp-punch[.]php
hxxps://sardarmohammad[.]com/reports[.]php
hxxps://erikarabelo[.]com[.]br/server[.]php
hxxps://thechapelofthehealingcross[.]org/java[.]php
hxxps://grebcanualcwilfprofal[.]ml/wp-smarts[.]php
hxxps://hac3r[.]com/wp-punch[.]php
hxxps://womtools[.]com/wp-punch[.]php
hxxps://valitec[.]co/wp-punch[.]php
hxxps://empresascreciendobien[.]com/server[.]php
hxxps://smartat[.]co/error[.]php
hxxps://teamearenttopdiaty[.]ga/wp-smarts[.]php
hxxps://orangeboxasia[.]com/wp-smarts[.]php
hxxps://m3izoglass[.]ro/wp-smarts[.]php
hxxps://bayza[.]ro/up_img_01[.]php
hxxps://cofetariarodna[.]ro/errors[.]php
hxxps://casapintea[.]ro/logs[.]php
hxxps://roractaseja[.]ml/wp-smarts[.]php
hxxps://iqowijsdakm[.]ru/gate[.]php
hxxps://wiewjdmkfjn[.]ru/gate[.]php
hxxps://dksaoidiakjd[.]su/gate[.]php
hxxps://iweuiqjdakjd[.]su/gate[.]php
hxxps://yuidskadjna[.]su/gate[.]php
hxxps://olksmadnbdj[.]su/gate[.]php
hxxps://monanuslanus[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://lericastrongs[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://hyllionsudks[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://crimewasddef[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://derekdsingel[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://simplereffiret[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://regeerscomba[.]com/bFnF0y1r/7QKpXmV3Pz[.]php
hxxps://tfbuildingjoinery[.]co[.]uk/robots[.]php
hxxps://globalpacificproperties[.]com[.]au/terms[.]php
hxxps://www[.]loonybinforum[.]com/errors[.]php
hxxps://luminousintent[.]com[.]au/wp-smarts[.]php
hxxps://espazioabierto[.]com/wp-smarts[.]php
hxxps://racriporrosepo[.]tk/wp-smarts[.]php
hxxps://dhteijwrb[.]host/milagrecf[.]php
hxxps://aquolepp[.]pw/milagrecf[.]php
hxxps://fdsjfjdsfjdsdsjajjs[.]com/gate[.]php
hxxps://idisaudhasdhasdj[.]com/gate[.]php
hxxps://dsjdjsjdsadhasdas[.]com/gate[.]php
hxxps://dsdjfhdsufudhjas[.]com/gate[.]php
hxxps://dsdjfhdsufudhjas[.]info/gate[.]php
hxxps://fdsjfjdsfjdsdsjajjs[.]info/gate[.]php
hxxps://idisaudhasdhasdj[.]info/gate[.]php
hxxps://airnaa[.]org/sound[.]php
hxxps://banog[.]org/sound[.]php
hxxps://rayonch[.]org/sound[.]php
hxxp://march262020[.]best/post[.]php
hxxp://march262020[.]club/post[.]php
hxxp://march262020[.]com/post[.]php
hxxp://march262020[.]live/post[.]php
hxxp://march262020[.]network/post[.]php
hxxp://march262020[.]online/post[.]php
hxxp://march262020[.]site/post[.]php
hxxp://march262020[.]store/post[.]php
hxxp://march262020[.]tech/post[.]php
hxxps://dcaiqjgnbt[.]icu/wp-config[.]php
hxxps://nmttxggtb[.]press/wp-config[.]php
hxxps://iloveyoubaby1[.]pro/gate[.]php
hxxps://idsakjfsanfaskj[.]com/gate[.]php
hxxps://fslakdasjdnsasjsj[.]com/gate[.]php
hxxps://dksadjsahnfaskmsa[.]com/gate[.]php
hxxps://dskdsajdsahda[.]info/gate[.]php
hxxps://dskdsajdsadasda[.]info/gate[.]php
hxxps://dskjdsadhsahjsas[.]info/gate[.]php
hxxps://dsjadjsadjsadjafsa[.]info/gate[.]php
hxxps://fsakjdsafasifkajfaf[.]pro/gate[.]php
hxxps://djsadhsadsadjashs[.]pro/gate[.]php
hxxps://wgyvjbse[.]pw/milagrecf[.]php
hxxps://botiq[.]xyz/milagrecf[.]php
hxxps://kuaxbdkvbbmivbxkrrev[.]com/wp-config[.]php
hxxps://hwbblyyrb[.]pw/wp-config[.]php
hxxps://xyajbocpggsr[.]site/wp-config[.]php
hxxps://ooygvpxrb[.]pw/wp-config[.]php
hxxps://eoieowo[.]casa/wp-config[.]php
hxxps://dcgljuzrb[.]pw/wp-config[.]php
hxxp://marchadvertisingnetwork4[.]com/post[.]php
hxxp://marchadvertisingnetwork5[.]com/post[.]php
hxxp://marchadvertisingnetwork6[.]com/post[.]php
hxxp://marchadvertisingnetwork7[.]com/post[.]php
hxxp://marchadvertisingnetwork8[.]com/post[.]php
hxxp://marchadvertisingnetwork9[.]com/post[.]php
hxxp://marchadvertisingnetwork10[.]com/post[.]php
hxxps://eecakesconf[.]at/web982/gate[.]php
hxxp://wingtonwelbemdon[.]com/web/post[.]php
hxxp://donburitimesofindia[.]com/web/post[.]php
hxxp://celtictimesofkarishan[.]com/web/post[.]php
hxxp://welcometothehotelsoflifes[.]com/web/post[.]php
hxxp://wheredidtheelllcctoncsgo[.]com/web/post[.]php
hxxp://myworld2002020999[.]com/web/post[.]php
hxxps://kare[.]academy/wl9nfl[.]php
hxxps://skal[.]tk/a0qqpr[.]php
hxxps://casascala[.]isoladelba[.]it/1lhdcb[.]php
hxxps://tamilgreets[.]com/0vjkrn[.]php
hxxps://ahoracallao[.]com/kzqlgx[.]php
hxxps://shbiolabs[.]com/gkqm9o[.]php
hxxps://bmavan[.]com/qshecj[.]php
hxxps://barsoleillevant[.]fr/czdhxu[.]php
hxxps://innovabusiness[.]cv/assly0[.]php
hxxps://mevededustderin[.]tk/wp-smarts[.]php
hxxps://kochamkkkras[.]ru/gate[.]php
hxxps://uookqihwdid[.]ru/gate[.]php
hxxps://odsakmdfnbs[.]su/gate[.]php
hxxps://odsakjmdnhsaj[.]su/gate[.]php
hxxp://kentyckyderby201000[.]com/web/post[.]php
hxxp://deemberkentyucky101[.]com/web/post[.]php
hxxp://decemberkentuck102981[.]com/web/post[.]php
hxxps://fqnceas[.]su/gate[.]php
hxxps://fqlocpeas[.]ru/gate[.]php
hxxps://dksaiijn[.]ru/gate[.]php
hxxps://dksafjasnf[.]su/gate[.]php
hxxps://fjsafasfsa[.]ru/gate[.]php
hxxps://fjskoijafsa[.]ru/gate[.]php
hxxps://fqnvsdaas[.]su/gate[.]php
hxxps://fqnvtcpheas[.]su/gate[.]php
hxxps://fqnvtmophfeas[.]ru/gate[.]php
hxxps://freebreez[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://makaronz[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://ricklick[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://litlblockblack[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://vaktorianpackif[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://hbamefphmqsdgkqojgwe[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://hoxfqvlgoabyfspvjimc[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://yrsfuaegsevyffrfsgpj[.]com/LKhwojehDgwegSDG/gateJKjdsh[.]php
hxxps://adslstickerfone[.]world/click[.]php
hxxp://xz[.]8dashi[.]com/qd/PianoScrap[.]exe
hxxp://217[.]12[.]208[.]14/personal[.]dll
hxxps://pornovideos8k[.]com/Java[.]msi
hxxp://sitekprocess[.]com/objects/sales/email/2418587/064304[.]xls
hxxps://doc-14-7k-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/24q6ooopfb46pkhpnfhbr7v2astorfki/1618329525000/13066579965601557126/*/1J6hZX8fAJgwFbT_6695LzSHt9OntZz_w
hxxps://doc-0c-bk-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/4f4ehge3vp470bnn2ne20i51bi6mgr17/1616602650000/04659036336902827793/*/1CPk0Pvu5h4LZBu1bLhAIetvU0ziQtCii
hxxps://doc-0o-3c-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/f7amvjjgkqvfhkb3d31fbb7v96hetmcg/1616604450000/03237488210228332237/*/1aOdWyR48OQwjXyaE8qimNPOb3rMCM5d4
hxxps://doc-0s-c4-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/fglsrnv4shdg2bcanb4ul4tr9adg6mpe/1616602800000/11513510660063365698/*/1Y-Le5-AOgoebey6lNhn3m0V5cS9yrDbh
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=ib6t2260ae818966b46a5a4c0d009d3fc7d76
hxxps://doc-00-1c-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/tu7goeec78gqabhcp6hf99dm1c3v5k00/1615490250000/12952218777540414415/*/1krrtzSO_5_qcA0AGl6_QGXs1n5I3pfAL
hxxps://doc-04-6c-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/sba1pfpr875tan60uca1mqoej5o53597/1615482675000/11933243695839519870/*/1M-ketuJJkgqAz2zU-zuz1FAFuA_JAr4t
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=ib6t285606c86388e4b86803a834a22c41941
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=7awqsa3574d513c944d4cb8abb46af45af39c
hxxps://docs[.]google[.]com/uc?id=1dh0DsoOd7PVhTHZlGrf5mHz1vXq7Coox
hxxps://docs[.]google[.]com/uc?id=1uzWNVOyvG4N79GmQzapUsQ9Tud4StLtJ
hxxps://doc-08-2s-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/gqslm25kbb5msg0fdmu4vdr8gsijcffe/1613509350000/03144821645756162657/*/10rpGz-PyDHTjXBcu-85x-Tr8L4IWJIz5
hxxps://doc-10-7g-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/abhpj833su52tf89ta4f2il4s1ol6s0p/1613501700000/09579227080578924539/*/12aucBdgQZ-CAbIKykRM9JaAAu1HVjWZO
hxxps://docs[.]google[.]com/uc?id=10gD8TzJsO2WzxCjZTgPAjKqDDZi8vAyC
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=nawuya2b390cd3cd149628c5bf3d46f58954f
hxxp://docs[.]zoho[.]com/downloaddocument[.]do?docId=2nv9e0792f1910e014d2387a3affa9764d7c2
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=2nv9ed7f8b35c9bb34fde83ef20906f043c61
hxxps://docs[.]zoho[.]com/downloaddocument[.]do?docId=2nv9efc6b2ce0c3bf4916a118a25e0b839612
hxxps://fortnitehecks[.]com/kev/xeda[.]dll
hxxp://starlitebaby[.]com/xls/case-3015[.]xls
hxxp://kdexport[.]com/7123853[.]xlsb
hxxp://alecrimagency[.]com/7123854[.]xlsb
hxxps://sunspalato[.]com/wp-content/uploads/estate_templates/n1[.]exe
hxxp://aceofspadesbarberstudio[.]com/n2[.]exe
hxxps://sunspalato[.]com/wp-content/uploads/estate_templates/n3[.]exe
hxxps://sunspalato[.]com/wp-content/uploads/estate_templates/n4[.]exe
hxxp://ainclubgirls[.]space/wasm_003892[.]exe
hxxp://sitetickets[.]website/order_00588_pay[.]rar
hxxp://real-chat[.]club/ebook_29[.]10[.]20[.]exe
hxxps://wilsfranenasco[.]ml/dskle8frg[.]php
hxxp://205[.]185[.]113[.]20/files/2[.]dll
hxxps://docustore2020[.]top/xls4xsa45dsd/details1910[.]xls
hxxp://cateringmuslimcemangi[.]com/2[.]exe
hxxps://docsecure[.]top/xls4354565dfD/details1510p[.]xls
hxxp://purefiles24[.]top/dlldfa32342/xls[.]c1
hxxps://onlyfiles24[.]top/xlsdm4355dd/details1410[.]xls
hxxp://candesprojects[.]com/File2[.]exe
hxxp://helmut01[.]tech017[.]net[.]in/bomb[.]dll
hxxps://getfile24[.]com/dll328756g3f4/xls_s_2909[.]exe1[.]c1
hxxps://freshstorage2020[.]com/xlsafh2323d22asds/details_0510s[.]xls
hxxps://doc-0s-c8-docs[.]googleusercontent[.]com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/lk7ekbf026e2nnlrq9brb52it5aofu0i/1601916000000/08069565659861269988/*/1HqI4mJVE0ifPo5vwi0oKySf2EaKt1Ljz
hxxps://thesesecrets2020[.]net/dll323jsdhfksjdhf32/xls_s_2809[.]exe1[.]c1
hxxps://ochko123[.]net/details_cc[.]xls
hxxp://205[.]185[.]113[.]20/files/911[.]dll
hxxp://205[.]185[.]125[.]104/files/tor[.]exe
hxxp://thezencon[.]com/omicron/voicemail[.]php
hxxp://l0[.]nu/B3[.]DLL
hxxp://152[.]89[.]216[.]155/nocrypt[.]dll
hxxps://fsakfiasjmls000kjajs[.]online/updateme[.]dll
hxxp://bumdesnesia[.]com/bat1k3[.]dll
hxxp://205[.]185[.]125[.]104/files/812[.]db
hxxp://205[.]185[.]125[.]104/files/july27[.]dll
hxxp://205[.]185[.]125[.]104/files/july22[.]dll
hxxp://www[.]vccerramientos[.]com[.]ar/suy9/qd7o1-fl-5139
hxxp://goodfoodserve[.]com/jly[.]dll
hxxp://alkor[.]com[.]pl/wp-admin/s5-hwz-8926/
hxxps://golabi[.]org/dev/UZ/
hxxps://medint[.]io/wp-admin/multifunctional_1c1cp_myq46my71sbm/0284198117_FdmB7AqYh_j1PN2sug_Mw9mzfXW/Pw0tvxf_1a0f3jd3/
hxxps://neroyaki[.]site/202[.]dll
hxxp://205[.]185[.]122[.]246/files/1[.]exe
hxxp://secure[.]zenithglobalplc[.]com/assets/plugins/form/bootstrap-wizard/js/syswow64[.]exe
hxxp://easy-web-weight-loss[.]com/b32_priv1[.]exe
hxxp://www[.]railpassion[.]org/images/cuba[.]exe
hxxp://newstodaymail[.]asia/00/b[.]exe
hxxp://jonnycigar[.]com/temp[.]exe
hxxps://secure[.]zenithglobalplc[.]com/assets/plugins/bootstrap-wizard/system_x64_11[.]03[.]2020crypt[.]exe
hxxp://jeffmclennan[.]ca/plugins/mssvcrt32[.]dll
hxxp://trackerhost[.]us/drop/lsm[.]exe
hxxp://nicedelivery[.]club/2[.]dll

---------------------------------------------