Vidar_IOCs_2020-03-12_13_02.txt

#Vidar #malware #OSINT #IOC

SHA256:
dbac0321bbcb383f1f1e8f64be22ff3b1c0fb4fa04b5fff163a2c6bccf16096a

IPs:
169[.]239[.]129[.]118


Domains:
mangroveforests[.]com


URL:
http://217[.]8[.]117[.]23/

http://217[.]8[.]117[.]23/JZ9vvMU7noUGFcve/conf[.]php

http://217[.]8[.]117[.]23/RealtekDk[.]exe

http://mangroveforests[.]com/

http://mangroveforests[.]com/83

http://mangroveforests[.]com/freebl3[.]dll

http://mangroveforests[.]com/mozglue[.]dll

http://mangroveforests[.]com/msvcp140[.]dll

http://mangroveforests[.]com/nss3[.]dll

http://mangroveforests[.]com/softokn3[.]dll

http://mangroveforests[.]com/vcruntime140[.]dll