Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Dropping URLs:
- http://pb128o6c2favwk.com/s9281P/yt1.php?l=treos[1-10].reb
- http://45.142.212.25/302[.]exe
- Vidar files:
- http://dersed.com/freebl3[.]dll
- http://dersed.com/msvcp140[.]dll
- http://dersed.com/nss3[.]dll
- http://dersed.com/mozglue[.]dll
- http://dersed[.]com/288
- http://dersed.com/vcruntime140[.]dll
- http://dersed.com/softokn3[.]dll
- Other Vidar domains:
- neonwise.com
- dersed.com
- eroomia.com
- sportsmula.com
- autarla.com
- C2:
- tcolleen4463dn.com
- IPs:
- 45.84.0.248
- 45.142.212.25
- 173.232.44.66
- 194.32.78.251
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
