SideCopy APT Infra

------------------------------------
HASHES (MD5 & SHA256)
------------------------------------
746d43d040fa899f046cc830a9a0d24c
ca3427edc13c3f568b510c07cf3429ee
853553554d2600d877ee7b93f6af1f9e
c5325fbb5a40c12ecae8107b3af235a6
75ac4bd5f625ca6b714982ae28eb2553
0a1ea0e7119e125141792f24eceb62d2
083524971703aca73c474fdb2bd93e18
9b3f66b7cc7f00a1ff8f962f2a0f13765a8324d6b532be02dce14e0a0de7e723
0e7bdb5ecbd8f74f38d75df6f8d5ae7ed3290b5dcf41212ecd3c1281e8f71ae6
530197049e60c0f6c60c7dd090e3bb3ff32a457d6094365c426cf990acfa4d97
2847d91ee9e779a1f12c294e27659e9f4d7f558969e4756b1325558962995075
b7ea935286421d881ca69a02e7a226d7b85e01d5cf7251ee89611c951fa73c2a
7129ad4ac19f03d6512d8ea3a4cf3373c52d30a982e4a3bba2a5357bcbdf7314
e1e42aee6386582cda56e55970151d7cc76e921d4589ed4aa60baabe34f02a2c

------------------------------------
Ares RAT C2 Server; Domain & URL(s)
------------------------------------
167.86.97[.]58:17854
zohidsindia[.]com
hxxp://167.86.97[.]58:17854/uploads/root_345044036645/letter
hxxp://167.86.97[.]58:17854/api/root_112493791739907/hello
hxxp://167.86.97[.]58:17854/api/root_112493791739907/upload
hxxp://167.86.97[.]58:17854/api/root_182335487955525/hello
hxxp://167.86.97[.]58:17854/api/root_182335487955525/upload
hxxp://167.86.97[.]58:17854/api/root_212723734339020/hello
hxxp://167.86.97[.]58:17854/api/root_212723734339020/upload
hxxp://167.86.97[.]58:17854/api/root_7735048412366/hello
hxxp://167.86.97[.]58:17854/api/root_7735048412366/upload