Vidar_IOCs_2019-12-03_12_54.txt

#Vidar #Arkei #malware #OSINT #IOC

MD5s:
ad3a6841147a5aac206a8e9362997f81

IPs:
209[.]141[.]33[.]126

Domains:
voyagephoshop[.]org

URL:
http://voyagephoshop[.]org/,
http://voyagephoshop[.]org/399,
http://voyagephoshop[.]org/freebl3[.]dll,
http://voyagephoshop[.]org/freebl3[.]dll?ddosprotected=1,
http://voyagephoshop[.]org/mozglue[.]dll,
http://voyagephoshop[.]org/msvcp140[.]dll,
http://voyagephoshop[.]org/nss3[.]dll,
http://voyagephoshop[.]org/softokn3[.]dll,
http://voyagephoshop[.]org/vcruntime140[.]dll,