Vidar_IOCs_2019-12-04_12_28.txt

#Vidar #Arkei #malware #OSINT #IOC

MD5s:
bb184dc0a01803e162084a90c4df5e37

IPs:
208[.]95[.]112[.]1


Domains:
voyagephoshop[.]org

URL:
http://voyagephoshop[.]org/,
http://voyagephoshop[.]org/533,
http://voyagephoshop[.]org/freebl3[.]dll,
http://voyagephoshop[.]org/freebl3[.]dll?ddosprotected=1,
http://voyagephoshop[.]org/mozglue[.]dll,
http://voyagephoshop[.]org/msvcp140[.]dll,
http://voyagephoshop[.]org/nss3[.]dll,
http://voyagephoshop[.]org/softokn3[.]dll,
http://voyagephoshop[.]org/vcruntime140[.]dll,