Arkei_IOCs_2019-08-27_13_22.txt

Vidar_IOCs_2019-08-27_13_22

Malware Famaily: Arkei

MD5s:
b743e9111bb1e3375c8375ae49d37cde

IPs:
194[.]32[.]78[.]251
66[.]212[.]29[.]250
72[.]11[.]140[.]50

Domains:

URL:
eroomia[.]com:80//231
eroomia[.]com:80//freebl3[.]dll
eroomia[.]com:80//mozglue[.]dll
eroomia[.]com:80//msvcp140[.]dll
eroomia[.]com:80//nss3[.]dll
eroomia[.]com:80//softokn3[.]dll
eroomia[.]com:80//vcruntime140[.]dll
http://eroomia[.]com/
http://eroomia[.]com/231
http://eroomia[.]com/freebl3[.]dll
http://eroomia[.]com/mozglue[.]dll
http://eroomia[.]com/msvcp140[.]dll
http://eroomia[.]com/nss3[.]dll
http://eroomia[.]com/softokn3[.]dll
http://eroomia[.]com/vcruntime140[.]dll
http://ip-api[.]com/line/
ip-api[.]com:80//line/

#malware #OSINT #IOC
#Vidar