Various RAT HTA Samples 7/13/2021

2nd Stage URLs:

httP://accessgrant.ydns.eu/excel.exe
httP://accessgrant.ydns.eu/office.exe
httP://alonso.luda.ydns.eu/msn.exe
httP://alonso.luda.ydns.eu/update.exe
httP://dswa.1337.cx/windows.exe
httP://freebeeskatobi.ydns.eu/kat1.exe
httP://freebeeskatobi.ydns.eu/obi1.exe
httP://hgoz.12v.si/conhosts.exe
httP://hgoz.12v.si/EXCEL.exe
httP://hgoz.12v.si/tasksmgr.exe
httP://hutyrtit.ydns.eu/microA.exe
httP://hutyrtit.ydns.eu/microC.exe
httP://hutyrtit.ydns.eu/microD.exe
httP://hutyrtit.ydns.eu/microF.exe
httP://katchobinnas.duckdns.org/obi.exe
httP://kqz.ugo.si/powerpoint.exe
httP://kqz.ugo.si/svchost.exe
httP://marcamsrl.com/crpYSZLkHw0n3SH.exe
httP://marcamsrl.com/frS8UmNq9MyY5Ap.exe
httP://marcamsrl.com/h/RFQ_1220274_SH0601201.exe
httP://marcamsrl.com/KD9.exe
httP://marketingintelligence.tech/FtxUc19TTX68pGY.exe
httP://marketingintelligence.tech/guggg/DNBAeYMT2WEKoZK.exe
httP://marketingintelligence.tech/MaGnTcNpa81Hzbv.exe
httP://okcupid.ydns.eu/microsoft.exe
httPs://hhhhh.ydns.eu/chrome.exe
httPs://hhhhh.ydns.eu/windows.exe
httPs://marcamsrl.com/5uNJuFIVFadgqwX.exe
httPs://marcamsrl.com/5WaCxjg34Runo2C.exe
httPs://marketingintelligence.tech/BGAmPrA9KABQcic.exe
httPs://marketingintelligence.tech/MT6jNvcjS9TNL0i.exe
httPs://marketingintelligence.tech/qOwCKaSXeZMljlf.exe
httP://SXZN.a4t.in/ChromeSetup.exe
httP://wama.hopto.org/doggy/putty.exe
httP://wamak.duckdns.org/doggy/putty.exe

HTA Sample Hashes:
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