| Sample Hash | STIX JSON IOC Download | IOCs |
|---|---|---|
| cde05dec6ff12dc06d24c32cf60525de84f11985fa82cbd734ccc63e1c3e9d9d View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/cde05dec6ff1/report/stix-report-2-1.json | hxxp[://]172[.]105[.] 101[.]254:7812 payloads-poison[.] 000webhostapp[.]com |
| cde05dec6ff12dc06d24c32cf60525de84f11985fa82cbd734ccc63e1c3e9d9d View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/d0c4045c70a0/report/stix-report-2-1.json | hxxps[://]github[.]com /ImagineBeingRatted/ Sigma/raw/main /Install[.]exe |
| hxxp[://]runderscore00-25501[.]portmap [.]host:25501 |
||
| 193[.]161[.]193[.]99 | ||
| 8f4c47976f851049b82a25404b72c892147d9aa7d3b62024c686ad24c763f029 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/8f4c47976f85/report/stix-report-2-1.json | hxxp[://]0x21[.]in:8000 /_az/ |
| hxxp[://]0x21[.]in/_az/ | ||
| hxxp[://]5[.]8[.]88[.]191:443 | ||
| hxxp[://]sockartek[.]icu:443 | ||
| 5[.]8[.]88[.]191 | ||
| 601768671271d499533a4360f1272fdb5a86ce4c87649811b80fc463422dff41 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/601768671271/report/stix-report-2-1.json | hxxp[://]93[.]182[.]171[.] 7:4782 |
| 5f32994ba6ed6ae9e0e77f719c38578d62fa20e17e6120a2adede2671dc7c5cc View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/5f32994ba6ed/report/stix-report-2-1.json | hxxp[://]abdo2024-47006[.]portmap [.]host:8080 |
| 45649f750756140bd9d47794c91c11e6d6b28424c8b497c3d5bf0a59bb9ba527 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/45649f750756/report/stix-report-2-1.json | hxxp[://]maeluadev-48337[.] portmap[.]io:48337 |
| 193[.]161[.]193[.]99 | ||
| e4b15f8ce5b80e4f7d805ecfd73311eb133b5c138d074e806a48b81584292f65 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/e4b15f8ce5b8/report/stix-report-2-1.json | hxxp[://]edition-eat[.]gl [.]at[.]ply[.]gg:13576 |
| 0d4276cbdb9eb4f3cf2524032e9f80bca3d1762404ad2240d35a2c123fe2e71d View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/0d4276cbdb9e/report/stix-report-2-1.json | hxxp[://]windows-11[.]duckdns[.]org:11 |
| 1928b93e3d7d30a0e8c2f6ef17b6333f79a3ee628ede60c41b1885f74e7f3303 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/1928b93e3d7d/report/stix-report-2-1.json | hxxp[://]pvt4s[.]duckdns[.]org:5965 |
| 6da2005775980d44d0a6f9d8f12d7394e8d81abf96f444a6c4da54c2376430a0 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/6da200577598/report/stix-report-2-1.json | hxxps[://]github[.]com /ImagineBeingRatted/Sigma /raw/main/Install[.]exe |
| hxxp[://]panel-slave[.]gl[.]at[.]ply[.]gg:57059 | ||
| d2f90d475a108951b3411445011c23803016cb0e537dde32d8d879a896906efb View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/d2f90d475a10/report/stix-report-2-1.json | hxxp[://]141[.]98[.]7[.]186:65525 |
| hxxp[://]141[.]98[.]7[.]196:61516 | ||
| hxxp[://]141[.]98[.]7[.]201:64872 | ||
| hxxp[://]141[.]98[.]7[.]175:64872 | ||
| hxxp[://]141[.]98[.]7[.]197:61516 | ||
| hxxp[://]141[.]98[.]7[.]188:61516 | ||
| hxxp[://]141[.]98[.]7[.]198:65525 | ||
| hxxp[://]141[.]98[.]7[.]176:64872 | ||
| hxxp[://]141[.]98[.]7[.]199:65525 | ||
| 35e7fe834913b280077c5a30396138bfdcb3dae404b7802878be38b3d2120606 View the Sandbox Web Report |
https://www.vmray.com/analyses/_vt/35e7fe834913/report/stix-report-2-1.json | hxxp[://]19[.]ip[.]gl[.]ply[.]gg:53356 |
