MalwareMessiagh

Ursnif IOC

Jul 19th, 2019
52,607
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.42 KB | None | 0 0
  1. Droppers:
  2. http://d18646broderick.net/sywo/fgoow.php?l=typef[1-11].gxl
  3. http://d18646broderick.com/sywo/fgoow.php?l=typef[1-11].gxl
  4. http://109.196.164.79/3[.]php
  5.  
  6. C2:
  7. jpearl26kacey.top
  8. sdorthyyantonietta.top
  9. cutaylorpascale.top
  10.  
  11. IPs:
  12. 85.143.220.29 - Has been distributing TrickBot before
  13. 85.143.221.52
  14. 85.143.223.250
  15. 176.32.32.212
  16. 195.133.197.110
  17.  
  18. AnyRun:
  19. https://app.any.run/tasks/0b6e6545-ec26-4c93-b61d-7ed36f8973cc
Add Comment
Please, Sign In to add comment