Sonbokli_IOCs_2019-11-26_12_40.txt

#Sonbokli #malware #OSINT #IOC

MD5s:
eee958c35ed3b4fb733c7f0a27404154

IPs:
165[.]227[.]156[.]155
169[.]254[.]255[.]254
185[.]71[.]216[.]114
206[.]189[.]112[.]148
206[.]81[.]10[.]215
47[.]103[.]7[.]52
50[.]116[.]86[.]205
52[.]109[.]20[.]1
52[.]109[.]2[.]18
72[.]21[.]91[.]29
82[.]102[.]29[.]113


URL:
http://165[.]227[.]156[.]155:443/acquire/child/,
http://206[.]189[.]112[.]148:8080/devices/mult/,
http://206[.]189[.]112[.]148:8080/loadan/,
http://206[.]189[.]112[.]148:8080/merge/,
http://206[.]189[.]112[.]148:8080/prov/,
http://206[.]189[.]112[.]148:8080/schema/forced/cone/merge/,
http://206[.]81[.]10[.]215:8080/iplk/scripts/,
http://50[.]116[.]86[.]205:8080/img/odbc/,