286 KiB
286 KiB
| 1 | Type | Indicator | Context | Source | |
|---|---|---|---|---|---|
| 2 | SHA256 | a196c6b8ffcb97ffb276d04f354696e2391311db3841ae16c8c9f56f36a38e92 | WhisperGate Wiper | hxxps://www[.]microsoft[.]com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/ | |
| 3 | SHA256 | dcbbae5a1c61dbbbb7dcd6dc5dd1eb1169f5329958d38b58c3fd9384081c9b78 | WhisperGate Wiper | hxxps://www[.]microsoft[.]com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/ | |
| 4 | Domain | gorigan[.]ru | Pterodo C2 | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 5 | Domain | teroba[.]ru | Pterodo C2 | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 6 | Domain | krashand[.]ru | Pterodo C2 | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 7 | SHA256 | 51b9e03db53b2d583f66e47af56bb0146630f8a175d4a439369045038d6d2a45 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 8 | SHA256 | 2042a2feb4d9f54d65d7579a0afba9ee1c6d22e29127991fbf34ea3da1659904 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 9 | SHA256 | 425ee82f20eb87e07a0d4f77adb72bf3377051365be203ee6ded37b399094f20 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 10 | SHA256 | fe068e324cd4175f857dfee4c23512ed01f3abbf8b6138b715caa1ba5e9486c0 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 11 | SHA256 | 798cd714cf9e352c1e9de3d48971a366b09eeffb3513950fd64737d882c25a38 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 12 | SHA256 | ef9b39705decbb85269518705053e7f4087758eea6bab4ba9135bf1ae922b2ea | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 13 | SHA256 | a87e9d5e03db793a0c7b8e8e197d14745265422f05e6e50867cdfbd150d0c016 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 14 | SHA256 | 2042a2feb4d9f54d65d7579a0afba9ee1c6d22e29127991fbf34ea3da1659904 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 15 | SHA256 | c68eb2fa929373cac727764d2cc5ca94f19a0ec7fd8c0876b98f946e72d9fa03 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 16 | SHA256 | 3b6445cf6f8e9e70cb0fff35d723fec8203375d67cbd67c9a672cddc02a7ff99 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 17 | SHA256 | bae9895ad4e392990a09b1b8a01e424a7ad3769e538ac693919d1b99989f0cb3 | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 18 | SHA256 | c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 19 | SHA256 | cb0d151d930b17f6376c18aa15fd976eac53d6f07d065fc27c40b466e3bc49aa | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 20 | SHA256 | 8ed03b1d544444b42385e79cd17c796fefae71d140b146d0757a3960d8ba3cba | Pterodo | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 21 | Domain | Jolotras[.]ru | QuietSieve C2 | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 22 | Domain | Moolin[.]ru | QuietSieve C2 | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 23 | SHA256 | 0afce2247ffb53783259b7dc5a0afe04d918767c991db2da906277898fd80be5 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 24 | SHA256 | e4d309735f5326a193844772fc65b186fd673436efab7c6fed9eb7e3d01b6f19 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 25 | SHA256 | f211e0eb49990edbb5de2bcf2f573ea6a0b6f3549e772fd16bf7cc214d924824 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 26 | SHA256 | 6d4b97e74abf499fa983b73a1e6957eadb2ec6a83e206fff1ab863448e4262c6 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 27 | SHA256 | eb1724d14397de8f9dca4720dada0195ebb99d72427703cabcb47b174a3bfea2 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 28 | SHA256 | e4d309735f5326a193844772fc65b186fd673436efab7c6fed9eb7e3d01b6f19 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 29 | SHA256 | b92dcbacbaaf0a05c805d31762cd4e45c912ba940c57b982939d79731cf97217 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 30 | SHA256 | b3d68268bd4bb14b6d412cef2b12ae4f2a385c36600676c1a9988cf1e9256877 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 31 | SHA256 | a6867e9086a8f713a962238204a3266185de2cc3c662fba8d79f0e9b22ce8dd6 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 32 | SHA256 | a01e12988448a5b26d1d1adecc2dda539b5842f6a7044f8803a52c8bb714cdb0 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 33 | SHA256 | 8a8c1a292eeb404407a9fe90430663a6d17767e49d52107b60bc229c090a0ae9 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 34 | SHA256 | 15099fc6aea1961164954033b397d773ebf4b3ef7a5567feb064329be6236a01 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 35 | SHA256 | 137bfe2977b719d92b87699d93c0f140d659e990b482bbc5301085003c2bd58c | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 36 | SHA256 | 0e5b4e578788760701630a810d1920d510015367bf90c1eab4373d0c48a921d9 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 37 | SHA256 | 0afce2247ffb53783259b7dc5a0afe04d918767c991db2da906277898fd80be5 | QuietSieve | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 38 | Domain | alacritas[.]ru | PowerPunch | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 39 | Domain | libellus[.]ru | PowerPunch | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 40 | Domain | brontaga[.]ru | DessertDown | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 41 | Domain | gortomalo[.]ru | DessertDown and possibly other ACTINIUM capabilities | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 42 | Domain | corolain[.]ru | Used for PowerShell cmdlets | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 43 | Domain | goloser[.]ru | Used for PowerShell cmdlets | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 44 | Hostname | delicacy[.]delicate[.]maizuko[.]ru | DinoTrain | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 45 | SHA256 | 0f9d723c3023a6af3e5522f63f649c7d6a8cb2727ec092e0b38ee76cd1bbf1c4 | DessertDown | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 46 | SHA256 | bf90d5db47e6ba3a1840976b6bb88a8d0dfe97dfe02c9ca31b7be4018816d232 | DessertDown | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 47 | SHA256 | b9b41fbbd646f11d148cface520a5d4e0ec502ba85c67b00668e239082a302e3 | DinoTrain | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 48 | SHA256 | c05f4c5a6bb940e94782e07cf276fc103a6acca365ba28e7b4db09b5bbc01e58 | DilongTrash | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 49 | SHA256 | 3cbe7d544ef4c8ff8e5c1e101dbdf5316d0cfbe32658d8b9209f922309162bcf | ObfuBerry | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 50 | SHA256 | 3bab73a7ba6b84d9c070bb7f71daab5b40fcb6ee0387b67be51e978a47c25439 | ObfuMerry | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 51 | Domain | acetica[.]online | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 52 | Domain | adeltorr[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 53 | Domain | arianat[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 54 | Domain | bartion[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 55 | Domain | bibliota[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 56 | Domain | bilorotka[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 57 | Domain | dokkade[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 58 | Domain | goshita[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 59 | Domain | hajimari[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 60 | Domain | libellus[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 61 | Domain | meshatr[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 62 | Domain | nakushita[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 63 | Domain | naletovo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 64 | Domain | nattanda[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 65 | Domain | nokitrav[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 66 | Domain | nonima[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 67 | Domain | onihik[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 68 | Domain | pertolka[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 69 | Domain | ruchkalo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 70 | Domain | shitemo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 71 | Domain | sorawo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 72 | Domain | telefar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 73 | Domain | urovista[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 74 | Domain | vadilops[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 75 | Domain | zvustro[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 76 | Domain | lenatara[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 77 | Domain | ouichi[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 78 | Domain | cryptonas[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 79 | Domain | konoatari[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 80 | Domain | moonilar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 81 | Domain | reapart[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 82 | Domain | nomukou[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 83 | Domain | mirotas[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 84 | Domain | ismetroh[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 85 | Domain | vositra[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 86 | Domain | fartopart[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 87 | Domain | atasareru[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 88 | Domain | uzumoreru[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 89 | Domain | sumikko[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 90 | Domain | vivaldar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 91 | Domain | ikaraur[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 92 | Domain | ruhodo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 93 | Domain | asdorta[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 94 | Domain | kolorato[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 95 | Domain | warau[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 96 | Domain | kimiga[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 97 | Domain | kippuno[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 98 | Domain | kroviti[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 99 | Domain | hibigaru[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 100 | Domain | lotorda[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 101 | Domain | oyoida[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 102 | Domain | dushnilo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 103 | Domain | akowaika[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 104 | Domain | torogat[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 105 | Domain | inosokof[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 106 | Domain | holotran[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 107 | Domain | huskari[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 108 | Domain | utemomac[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 109 | Domain | hortoban[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 110 | Domain | hopfar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 111 | Domain | koprotas[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 112 | Domain | golorta[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 113 | Domain | screato[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 114 | Domain | bellinor[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 115 | Domain | nokata[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 116 | Domain | nemoiti[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 117 | Domain | mudarist[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 118 | Domain | holorta[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 119 | Domain | kucart[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 120 | Domain | koltorist[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 121 | Domain | hokoldar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 122 | Domain | midiatr[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 123 | Domain | bibikaro[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 124 | Domain | gribata[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 125 | Domain | vnestri[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 126 | Domain | riontos[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 127 | Domain | hostarama[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 128 | Domain | artisola[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 129 | Domain | boltorg[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 130 | Domain | draagotan[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 131 | Domain | golofir[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 132 | Domain | goloser[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 133 | Domain | gortomalo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 134 | Domain | gloritapa[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 135 | Domain | bobotal[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 136 | Domain | historap[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 137 | Domain | jabilen[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 138 | Domain | herumot[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 139 | Domain | saturapa[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 140 | Domain | fortfar[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 141 | Domain | dudocilo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 142 | Domain | gongorat[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 143 | Domain | gortisir[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 144 | Domain | filorta[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 145 | Domain | gortova[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 146 | Domain | amaniwa[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 147 | Domain | nastorlam[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 148 | Domain | hilotrapa[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 149 | Domain | alebont[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 150 | Domain | dortisto[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 151 | Domain | nerabis[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 152 | Domain | jokolor[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 153 | Domain | nokratis[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 154 | Domain | machiwo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 155 | Domain | kolotran[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 156 | Domain | volotras[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 157 | Domain | milopoda[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 158 | Domain | zerotask[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 159 | Domain | vasitron[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 160 | Domain | nopaster[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 161 | Domain | dangeti[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 162 | Domain | haguret[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 163 | Domain | klotrast[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 164 | Domain | sundabokun[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 165 | Domain | rawaumi[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 166 | Domain | wokoras[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 167 | Domain | yazibo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 168 | Domain | jupirest[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 169 | Domain | vostilo[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 170 | Domain | lotorgas[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 171 | Domain | masshir[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 172 | Domain | martusi[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 173 | Domain | kovalsko[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 174 | Domain | nukegaran[.]ru | Gamaredon / PrimitiveBear | hxxps://www[.]microsoft[.]com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/ | |
| 175 | SHA256 | 1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591 | HermeticWiper | hxxps://www[.]cisa[.]gov/uscert/sites/default/files/publications/AA22-057A_Destructive_Malware_Targeting_Organizations_in_Ukraine[.]pdf | |
| 176 | SHA256 | 0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da | HermeticWiper | hxxps://www[.]cisa[.]gov/uscert/sites/default/files/publications/AA22-057A_Destructive_Malware_Targeting_Organizations_in_Ukraine[.]pdf | |
| 177 | SHA256 | a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e | HermeticWiper | hxxps://www[.]cisa[.]gov/uscert/sites/default/files/publications/AA22-057A_Destructive_Malware_Targeting_Organizations_in_Ukraine[.]pdf | |
| 178 | SHA256 | 4dc13bb83a16d4ff9865a51b3e4d24112327c526c1392e14d56f20d6f4eaf382 | PartyTrick Golang Ransomware | hxxps://www[.]cisa[.]gov/uscert/sites/default/files/publications/AA22-057A_Destructive_Malware_Targeting_Organizations_in_Ukraine[.]pdf | |
| 179 | SHA256 | 4e69bbb61329ace36fbe62f9fb6ca49c37e2e5a5293545c44d155641934e39d1 | install_upgrade (CyclopsBlink) | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 180 | SHA256 | ff17ccd8c96059461710711fcc8372cfea5f0f9eb566ceb6ab709ea871190dc6 | install_upgrade (CyclopsBlink) | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 181 | SHA256 | 50df5734dd0c6c5983c21278f119527f9fdf6ef1d7e808a29754ebc5253e9a86 | cpd (CyclopsBlink) | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 182 | SHA256 | c082a9117294fa4880d75a2625cf80f63c8bb159b54a7151553969541ac35862 | cpd (CyclopsBlink) | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 183 | IPv4 | 100[.]43[.]220[.]234 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 184 | IPv4 | 105[.]159[.]248[.]137 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 185 | IPv4 | 109[.]192[.]30[.]125 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 186 | IPv4 | 151[.]0[.]169[.]250 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 187 | IPv4 | 185[.]82[.]169[.]99 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 188 | IPv4 | 188[.]152[.]254[.]170 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 189 | IPv4 | 2[.]230[.]110[.]137 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 190 | IPv4 | 208[.]81[.]37[.]50 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 191 | IPv4 | 212[.]103[.]208[.]182 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 192 | IPv4 | 212[.]202[.]147[.]10 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 193 | IPv4 | 212[.]234[.]179[.]113 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 194 | IPv4 | 217[.]57[.]80[.]18 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 195 | IPv4 | 24[.]199[.]247[.]222 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 196 | IPv4 | 37[.]71[.]147[.]186 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 197 | IPv4 | 37[.]99[.]163[.]162 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 198 | IPv4 | 50[.]255[.]126[.]65 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 199 | IPv4 | 70[.]62[.]153[.]174 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 200 | IPv4 | 78[.]134[.]89[.]167 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 201 | IPv4 | 80[.]15[.]113[.]188 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 202 | IPv4 | 80[.]153[.]75[.]103 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 203 | IPv4 | 80[.]155[.]38[.]210 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 204 | IPv4 | 81[.]4[.]177[.]118 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 205 | IPv4 | 90[.]63[.]245[.]175 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 206 | IPv4 | 93[.]51[.]177[.]66 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 207 | IPv4 | 96[.]80[.]68[.]193 | CyclopsBlink C&C | hxxps://www[.]ncsc[.]gov[.]uk/files/Cyclops-Blink-Malware-Analysis-Report[.]pdf | |
| 208 | IPv4 | 94[.]158[.]244[.]27 | Payload host | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 209 | MD5 | c3564bde7b49322f2bacdc495146cfbc | Malicious MSI | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 210 | MD5 | 6fa9d3407b70e3928be3ee0a85ddb01c | Malicious MSI | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 211 | MD5 | e6a9e19e1b019f95bfc5a4e161794a7f | Malicious MSI | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 212 | MD5 | 2cc96a41092e7adf726365bbc5726150 | Malicious MSI | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 213 | MD5 | 9f566a164a5c6ae046c24d0e911dc577 | Malicious MSI | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 214 | MD5 | 5f568c80ab68a4132506f29ede076679 | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 215 | MD5 | 2b7b4ad2947516e633f5008ace02690d | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 216 | MD5 | bdcb83cc6f54d571a2c102fbbd8083c7 | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 217 | MD5 | b25865010562a3863ef892311644b3bb | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 218 | MD5 | bc740d642893e0fe23c75264ca7c2bca | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 219 | MD5 | d5628fe5de110e321110bbc76061702b | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 220 | MD5 | 53ee0babcf03b17e02e4317b6a410b93 | Malicious LNK | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 221 | MD5 | 7c1626fcaf47cdfe8aaed008d4421d8c | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 222 | MD5 | 6d40826dc7a9c1f5fc15e9823f30966b | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 223 | MD5 | c2ef9f814fc99670572ee76ba06d24da | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 224 | MD5 | 3751b3326f3963794d3835dbf65ac048 | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 225 | MD5 | 3cfc9972ad7cbd13cac51aade3f2b501 | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 226 | MD5 | ba1f2bfe95b219354ddad04b79579346 | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 227 | MD5 | 56be65fe4d9709c10cae511d53d92d1a | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 228 | MD5 | 9fe8203b06c899d15cb20d2497103dbb | Malicious RAR archive | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 229 | MD5 | 178b0739ac2668910277cbf13f6386e8 | Malicious Document | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 230 | MD5 | fd4de6bb19fac13487ea72d938999fbd | Malicious Document | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 231 | MD5 | 8293816be7f538ec6b37c641e9f9287f | Malicious Document | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 232 | MD5 | 714f8341bd1c4bc1fc38a5407c430a1a | Malicious Document | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 233 | domain | kfctm[.]online | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 234 | hostname | declaration[.]deed[.]coagula[.]online | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 235 | hostname | deer[.]dentist[.]coagula[.]online | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 236 | hostname | download[.]logins[.]online | Gamaredon / PrimitiveBear | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 237 | hostname | files-download[.]infousa[.]xyz | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 238 | hostname | my[.]cloud-file[.]online | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 239 | hostname | my[.]mondeychamp[.]xyz | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 240 | hostname | surname192[.]temp[.]swtest[.]ru | C2 domains | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 241 | URL | hxxp://94[.]158[.]244[.]27/distant[.]cdr | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 242 | URL | hxxp://files-download[.]infousa[.]xyz/Windows_photo_viewers[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 243 | URL | hxxp://my[.]cloud-file[.]online/Microsoft_VieweR_2012[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 244 | URL | hxxp://my[.]mondeychamp[.]xyz/ReadMe[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 245 | URL | hxxp://surname192[.]temp[.]swtest[.]ru/prapor/su/derg[.]gif | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 246 | URL | hxxp://surname192[.]temp[.]swtest[.]ru/prapor/su/flages[.]gif | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 247 | URL | hxxp://surname192[.]temp[.]swtest[.]ru/prapor/su/flagua[.]gif | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 248 | URL | hxxp://surname192[.]temp[.]swtest[.]ru/prapor/su/ino[.]gif | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 249 | URL | hxxp://download[.]logins[.]online/exe/LinK13112020[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 250 | URL | hxxp://files-download[.]infousa[.]xyz/Windows_photo_viewer[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 251 | URL | hxxp://kfctm[.]online/0802adqeczoL7[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 252 | URL | hxxp://my[.]mondeychamp[.]xyz/uUi1rV[.]msi | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 253 | URL | hxxp://94[.]158[.]244[.]27/absolute[.]ace | Payload URL | hxxps://www[.]zscaler[.]com/blogs/security-research/hermetic-wiper-resurgence-targeted-attacks-ukraine | |
| 254 | IPv4 | 84[.]201[.]154[.]133 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 255 | IPv4 | 142[.]93[.]125[.]122 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 256 | IPv4 | 130[.]162[.]32[.]102 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 257 | IPv4 | 137[.]74[.]155[.]78 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 258 | IPv4 | 173[.]254[.]204[.]124 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 259 | IPv4 | 185[.]245[.]96[.]227 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 260 | IPv4 | 45[.]61[.]136[.]130 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 261 | IPv4 | 46[.]29[.]166[.]105 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 262 | IPv4 | 5[.]182[.]211[.]5 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 263 | IPv4 | 152[.]89[.]239[.]12 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 264 | IPv4 | 209[.]141[.]33[.]208 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 265 | IPv4 | 45[.]61[.]186[.]13 | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 266 | IPv4 | 185[.]224[.]129[.]233 | Moobot DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 267 | domain | goodpackets[.]cc | Moobot DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 268 | IPv4 | 212[.]192[.]241[.]44 | Gafgyt DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 269 | IPv4 | 46[.]249[.]32[.]109 | Gafgyt DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 270 | IPv4 | 172[.]245[.]6[.]134 | Gafgyt DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 271 | IPv4 | 188[.]127[.]237[.]5 | Gafgyt DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 272 | IPv4 | 195[.]133[.]40[.]71 | Gafgyt DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 273 | IPv4 | 171[.]22[.]109[.]201 | Ripprbot DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 274 | IPv4 | 212[.]192[.]246[.]183 | Ripprbot DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 275 | IPv4 | 212[.]192[.]246[.]186 | Ripprbot DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 276 | FileHash-MD5 | 015ed26cc1656246177004eab5c059fe | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 277 | FileHash-MD5 | 03f6aeda4b403cead904240faec8d32f | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 278 | FileHash-MD5 | 0592fc8590bb8b01618bd1075bf45971 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 279 | FileHash-MD5 | 0eca53a2dca6384b7b1b7de186e835b5 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 280 | FileHash-MD5 | 13ead0d75d2fcdf53c7d6d8f40f615f4 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 281 | FileHash-MD5 | 16cc3f8359b55d32f133ecfd78092dcd | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 282 | FileHash-MD5 | 1b7247a2049da033a94375054829335d | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 283 | FileHash-MD5 | 283d7df13561c851d8959f24dce2af99 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 284 | FileHash-MD5 | 2a2cc9b33cfefc1f8dcf4eed09666ddc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 285 | FileHash-MD5 | 2a9ad76fbfe573820d89edc832a759a9 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 286 | FileHash-MD5 | 340255b25edf28c8de140f3f00306773 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 287 | FileHash-MD5 | 37f0100946589aeacdc647ccb14e9baa | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 288 | FileHash-MD5 | 39532b27e2dbd9af85f2da7ff4519467 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 289 | FileHash-MD5 | 45677381938006bbc019753dfdffb945 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 290 | FileHash-MD5 | 478ab4262768222839d51c7ea2e5e46f | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 291 | FileHash-MD5 | 49b9d14010071605549dc0dfb77d5f59 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 292 | FileHash-MD5 | 4b0b53b2f13ceb16b14f8cf7596682bc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 293 | FileHash-MD5 | 5096be3bab6b9731293472d7cbd78d18 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 294 | FileHash-MD5 | 53526f9affd4d2219e6a33d497ef17f3 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 295 | FileHash-MD5 | 54bd85b40041ba82ae1b57664ee3e958 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 296 | FileHash-MD5 | 59b9988a7132fda4fb89b3758411e9df | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 297 | FileHash-MD5 | 619517a7ff244de1dc574d2ffb6553d3 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 298 | FileHash-MD5 | 67d2f13fcd2622c85d974a6c41c285a4 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 299 | FileHash-MD5 | 68ed4532bd6ad79f263715036dee6021 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 300 | FileHash-MD5 | 69717fbd6954f16794ff46e4b7c0f58a | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 301 | FileHash-MD5 | 69b51b792b1fca9a268ce7cc1e1857df | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 302 | FileHash-MD5 | 6a9587b5c95d16ce915c3218aa0ef68c | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 303 | FileHash-MD5 | 70aaa4746150eba8439308096b17d8cc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 304 | FileHash-MD5 | 72e13614d7f45adce589d3ab6a855653 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 305 | FileHash-MD5 | 75011d511ee19c482cd12271c238d7d3 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 306 | FileHash-MD5 | 831353dd99cae5bb9ae7dcf125bbe46c | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 307 | FileHash-MD5 | 84c7c39e3f1a4bdfdcfaa4800d410829 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 308 | FileHash-MD5 | 870e6969eb7db126e945cfd7e9a2ed5f | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 309 | FileHash-MD5 | 89bb874db266e9aa4d9c07e994a0f02d | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 310 | FileHash-MD5 | 8be8a51819d7493de15c5ad7471fe1cc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 311 | FileHash-MD5 | 8c2a26b9171964d12739addb750f2782 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 312 | FileHash-MD5 | 8e26db0a91c6cc2c410764d1f32bbac3 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 313 | FileHash-MD5 | 8f488f3218baec8b75dc6e42e5c90a47 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 314 | FileHash-MD5 | 9612862c128b5df388258a2e76e811a0 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 315 | FileHash-MD5 | 9636a88f8543b35d212e240c3094d7bb | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 316 | FileHash-MD5 | 9798c9f24407da3bb709384f161e20a5 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 317 | FileHash-MD5 | 9d2ed5fb9b586cb369b63aea5ee9c49e | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 318 | FileHash-MD5 | a7578b554b50cf01c43ebc54c3029fb2 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 319 | FileHash-MD5 | a9a286065f59e833ce6310e4ca0a327a | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 320 | FileHash-MD5 | ac9a7a24b3e5229df0e35f99bd8f4dd0 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 321 | FileHash-MD5 | ad59c219813642fc8d9af23131db12d1 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 322 | FileHash-MD5 | b21e118e9f6b4b393719e0669214946a | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 323 | FileHash-MD5 | b307dd0043e94400f8632c4d0c4eae0e | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 324 | FileHash-MD5 | bfaffefb3cc7f301d017242ca832cf45 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 325 | FileHash-MD5 | c2135973f6d059d9dd09a853cfa241fc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 326 | FileHash-MD5 | c5350546e6d22075ac58f0b4410a9c9a | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 327 | FileHash-MD5 | cc79916e1e472a657a9ae216b2602a7b | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 328 | FileHash-MD5 | d1bf7c6e6dde347ea3414cbf38b4e25f | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 329 | FileHash-MD5 | d38cc4879fe0bc66cb8e772b28fbfd15 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 330 | FileHash-MD5 | d3dd19a2ae9228ca71bdf58e3450e205 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 331 | FileHash-MD5 | df831e3d07da42cfa5acf95ef97a753a | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 332 | FileHash-MD5 | e2b103a3b74dd0bfd98ffd27ed07f2c6 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 333 | FileHash-MD5 | e5822f8f9bc541e696f5520b9ad0e627 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 334 | FileHash-MD5 | ed6013177b8c7e61f936c14b698c7bdc | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 335 | FileHash-MD5 | f3dd9da090cc830e370dfa3a96128bd0 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 336 | FileHash-MD5 | f422e76ceead6fb12a1c53a68ed2f554 | DDoS bot ELF | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 337 | hostname | pear[.]1337[.]cx | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 338 | hostname | wpceservice[.]hldns[.]ru | Mirai DDoS bot C2 | hxxps://blog-netlab-360-com[.]translate[.]goog/wo-men-kan-dao-de-wu-ke-lan-bei-ddosgong-ji-xi-jie/ | |
| 339 | IPv4 | 185[.]173[.]94[.]12 | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 340 | IPv4 | 185[.]244[.]180[.]13 | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 341 | IPv4 | 194[.]110[.]248[.]92 | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 342 | domain | account-inbox[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 343 | domain | account-logins[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 344 | domain | accounts-login[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 345 | domain | accounts-telekom[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 346 | domain | akademia-mil[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 347 | domain | authorization-inbox[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 348 | domain | com-account[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 349 | domain | com-firewall[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 350 | domain | com-validate[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 351 | domain | com-verify[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 352 | domain | command-email[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 353 | domain | credentials-telekom[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 354 | domain | creditals-mirohost[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 355 | domain | i-ua[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 356 | domain | inbox-admin[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 357 | domain | interia-firewall[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 358 | domain | interia-pl[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 359 | domain | is-lt[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 360 | domain | konto-verify[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 361 | domain | kontrola-bezpieczenstwa[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 362 | domain | kontrola-bezpieczenstwa[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 363 | domain | kontrola-bezpieczenstwa[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 364 | domain | kontrola-bezpieczenstwa[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 365 | domain | kontrola-poczty[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 366 | domain | kontrola-poczty[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 367 | domain | login-inbox[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 368 | domain | login-inbox[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 369 | domain | login-mail[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 370 | domain | login-microsoftonline[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 371 | domain | login-telekom[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 372 | domain | login-verify[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 373 | domain | login-yahoo[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 374 | domain | logowanie-pl[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 375 | domain | mail-validation[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 376 | domain | meta-ua[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 377 | domain | mil-secure[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 378 | domain | mirohost-creditals[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 379 | domain | mirohost[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 380 | domain | mirohost[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 381 | domain | mod-mil[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 382 | domain | mod-mil[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 383 | domain | net-account[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 384 | domain | net-account[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 385 | domain | net-firewall[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 386 | domain | net-support[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 387 | domain | net-verification[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 388 | domain | net-verify[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 389 | domain | net-verify[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 390 | domain | onet-pl[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 391 | domain | op-pl[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 392 | domain | potwierdzenie[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 393 | domain | ron-mil-pl[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 394 | domain | ron-mil[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 395 | domain | ru-mailbox[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 396 | domain | ru-passport[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 397 | domain | safe-control[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 398 | domain | safe-onet[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 399 | domain | safe-onet[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 400 | domain | secure-firewall[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 401 | domain | secure-firewall[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 402 | domain | secure-ua[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 403 | domain | secure-ua[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 404 | domain | sign-in-inbox[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 405 | domain | signin-inbox[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 406 | domain | signin-telekom[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 407 | domain | sprawdzanie-konta[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 408 | domain | sprawdzanie-poczty[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 409 | domain | telekom-dienste[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 410 | domain | ua-agreements[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 411 | domain | ua-login[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 412 | domain | ua-passport[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 413 | domain | ua-passport[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 414 | domain | ukroboronprom-com[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 415 | domain | ukroboronprom[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 416 | domain | verify-ua[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 417 | domain | verify-ua[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 418 | domain | verify-ua[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 419 | domain | walidacja-konta[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 420 | domain | walidacja-poczty[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 421 | domain | walidacja-uzytkownika[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 422 | domain | walidacja-uzytkownika[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 423 | domain | walidacja-uzytkownika[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 424 | domain | walidacja-uzytkownika[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 425 | domain | weryfikacja-konta[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 426 | domain | weryfikacja-poczty[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 427 | domain | weryfikacja-uzytkownika[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 428 | domain | weryfikacja-uzytkownika[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 429 | domain | weryfikacja-uzytkownika[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 430 | domain | wirtualna-polska[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 431 | domain | wp-agreements[.]online | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 432 | domain | wp-firewall[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 433 | domain | wp-pl-potwierdz-dostep[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 434 | domain | wp-potwierdzac[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 435 | hostname | i[.]ua-passport[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 436 | hostname | id[.]bigmir[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 437 | hostname | interia[.]kontrola-bezpieczenstwa[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 438 | hostname | interia[.]sprawdzanie-konta[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 439 | hostname | konto[.]weryfikacja-uzytkownika[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 440 | hostname | login[.]walidacja-poczty[.]space | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 441 | hostname | pis[.]kontrola-bezpieczenstwa[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 442 | hostname | pis[.]kontrola-bezpieczenstwa[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 443 | hostname | poczta[.]kontrola-bezpieczenstwa[.]site | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 444 | hostname | poczta[.]kontrola-bezpieczenstwa[.]website | UNC1151 / Ghostwriter | hxxps://community[.]riskiq[.]com/article/e3a7ceea/indicators | |
| 445 | IPv4 | 2[.]59[.]36[.]194 | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 446 | domain | koparas[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 447 | domain | loralis[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 448 | domain | pitroksa[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 449 | hostname | aaa[.]koparas[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 450 | hostname | aaa[.]loralis[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 451 | hostname | aaa[.]pitroksa[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 452 | hostname | amateur100[.]pitroksa[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 453 | hostname | globe11[.]koparas[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 454 | hostname | globe24[.]koparas[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 455 | hostname | globe90[.]koparas[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 456 | hostname | gloomily67[.]golitus[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 457 | hostname | interference20[.]holotras[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 458 | hostname | low63[.]loralis[.]ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/stamparm/maltrail/blob/2d0339af3523b230d8e9a08efd22af032ec7a18e/trails/static/malware/apt_gamaredon[.]txt | |
| 459 | Domain | accordan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 460 | Domain | acetica.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 461 | Domain | acetobacter.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 462 | Domain | acetobacter.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 463 | Domain | acidop.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 464 | Domain | acrididae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 465 | Domain | acrididae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 466 | Domain | acteran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 467 | Domain | acteraon.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 468 | Domain | acterium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 469 | Domain | adeltorr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 470 | Domain | adleer.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 471 | Domain | aerogenosa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 472 | Domain | agarisi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 473 | Domain | akowaika.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 474 | Domain | akunir.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 475 | Domain | alebont.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 476 | Domain | alibetar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 477 | Domain | aligatou.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 478 | Domain | almenar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 479 | Domain | alseid.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 480 | Domain | alvarados.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 481 | Domain | amaniwa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 482 | Domain | amieteku.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 483 | Domain | anainat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 484 | Domain | anaraq.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 485 | Domain | anatara.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 486 | Domain | anisoptera.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 487 | Domain | anisoptera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 488 | Domain | anits.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 489 | Domain | apaturinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 490 | Domain | apaturinae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 491 | Domain | apidaet.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 492 | Domain | apidaet.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 493 | Domain | arachnidas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 494 | Domain | arachnidas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 495 | Domain | aradewa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 496 | Domain | arctiidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 497 | Domain | arctiidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 498 | Domain | arianat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 499 | Domain | arianos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 500 | Domain | ariuma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 501 | Domain | asdorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 502 | Domain | ashiato.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 503 | Domain | asilidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 504 | Domain | asilidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 505 | Domain | atasareru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 506 | Domain | avirona.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 507 | Domain | azukimiwo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 508 | Domain | bacill.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 509 | Domain | bacilluse.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 510 | Domain | bacteri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 511 | Domain | bacterin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 512 | Domain | bacterir.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 513 | Domain | bacteriu.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 514 | Domain | baldasha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 515 | Domain | banisha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 516 | Domain | barbatas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 517 | Domain | barniga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 518 | Domain | bartion.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 519 | Domain | baryo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 520 | Domain | baryom.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 521 | Domain | bassont.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 522 | Domain | bellinor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 523 | Domain | bennerit.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 524 | Domain | bercul.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 525 | Domain | berezini.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 526 | Domain | bertis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 527 | Domain | betsuno.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 528 | Domain | bibikaro.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 529 | Domain | biblidinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 530 | Domain | bibliota.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 531 | Domain | biiter.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 532 | Domain | bikestr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 533 | Domain | bikortas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 534 | Domain | bilorotka.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 535 | Domain | biontra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 536 | Domain | blaberidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 537 | Domain | blaberidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 538 | Domain | blattodea.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 539 | Domain | blattodea.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 540 | Domain | blositro.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 541 | Domain | bluera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 542 | Domain | bluestah.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 543 | Domain | bobotal.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 544 | Domain | bokujanai.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 545 | Domain | boltorg.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 546 | Domain | borsina.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 547 | Domain | bortogat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 548 | Domain | botulina.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 549 | Domain | bratseth.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 550 | Domain | brevib.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 551 | Domain | brevisi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 552 | Domain | brontaga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 553 | Domain | brucel.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 554 | Domain | buffalor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 555 | Domain | bugarto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 556 | Domain | buruncha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 557 | Domain | butyri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 558 | Domain | camama.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 559 | Domain | canalas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 560 | Domain | candidar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 561 | Domain | ceerdi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 562 | Domain | cerambycidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 563 | Domain | cereusi.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 564 | Domain | cereusi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 565 | Domain | chahoda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 566 | Domain | chargata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 567 | Domain | chehalo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 568 | Domain | chelicerata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 569 | Domain | cheric.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 570 | Domain | cholerd.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 571 | Domain | cillium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 572 | Domain | circulas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 573 | Domain | cliraco.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 574 | Domain | clostri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 575 | Domain | coagula.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 576 | Domain | cobact.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 577 | Domain | coferto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 578 | Domain | coffiti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 579 | Domain | coleopteras.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 580 | Domain | coliadinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 581 | Domain | coliadinae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 582 | Domain | colista.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 583 | Domain | comprando.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 584 | Domain | cryptonas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 585 | Domain | cterium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 586 | Domain | culosa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 587 | Domain | culosisa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 588 | Domain | cyrestinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 589 | Domain | cyrestinae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 590 | Domain | dahla.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 591 | Domain | dahmke.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 592 | Domain | dambart.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 593 | Domain | danainae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 594 | Domain | dangeti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 595 | Domain | danirat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 596 | Domain | dank.hazari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 597 | Domain | debary.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 598 | Domain | debarys.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 599 | Domain | derikan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 600 | Domain | destarro.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 601 | Domain | detegro.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 602 | Domain | devasil.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 603 | Domain | devtato.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 604 | Domain | dintara.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 605 | Domain | dipteran.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 606 | Domain | dipteran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 607 | Domain | djurhuus.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 608 | Domain | dokkade.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 609 | Domain | domasq.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 610 | Domain | domonas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 611 | Domain | dophil.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 612 | Domain | doriga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 613 | Domain | dortisto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 614 | Domain | doscotra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 615 | Domain | draagotan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 616 | Domain | dudocilo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 617 | Domain | dushnilo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 618 | Domain | earium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 619 | Domain | edoboku.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 620 | Domain | eidoloni.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 621 | Domain | elitoras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 622 | Domain | elmqvist.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 623 | Domain | elvisar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 624 | Domain | empusidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 625 | Domain | empusidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 626 | Domain | enarto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 627 | Domain | engardos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 628 | Domain | enterow.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 629 | Domain | enterox.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 630 | Domain | erati.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 631 | Domain | ericsoni.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 632 | Domain | erlanda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 633 | Domain | ermasa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 634 | Domain | erobact.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 635 | Domain | erostipa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 636 | Domain | erunanikan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 637 | Domain | erwina.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 638 | Domain | erwini.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 639 | Domain | eschera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 640 | Domain | escheri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 641 | Domain | esoudak.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 642 | Domain | eurypterida.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 643 | Domain | fanniidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 644 | Domain | fanniidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 645 | Domain | faroinh.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 646 | Domain | fartopart.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 647 | Domain | filorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 648 | Domain | fiordan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 649 | Domain | fishara.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 650 | Domain | fishardo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 651 | Domain | flavobac.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 652 | Domain | flodman.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 653 | Domain | fnrn.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 654 | Domain | fordimo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 655 | Domain | fortfar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 656 | Domain | fortias.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 657 | Domain | fortinas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 658 | Domain | fortitat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 659 | Domain | fukakumog.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 660 | Domain | fusari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 661 | Domain | fusaris.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 662 | Domain | gaderu.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 663 | Domain | garbani.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 664 | Domain | genkai.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 665 | Domain | gholam.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 666 | Domain | gibarto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 667 | Domain | glitteran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 668 | Domain | glotrast.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 669 | Domain | gluconid.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 670 | Domain | golitrap.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 671 | Domain | golofir.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 672 | Domain | golorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 673 | Domain | gonepteryx.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 674 | Domain | gonepteryx.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 675 | Domain | gongorat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 676 | Domain | goolati.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 677 | Domain | gordovat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 678 | Domain | gorrita.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 679 | Domain | gortova.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 680 | Domain | goruda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 681 | Domain | gosacc.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 682 | Domain | goshita.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 683 | Domain | gotpnib.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 684 | Domain | grafitto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 685 | Domain | gramine.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 686 | Domain | graphiuma.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 687 | Domain | graphiuma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 688 | Domain | graphosoma.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 689 | Domain | graphosoma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 690 | Domain | gribata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 691 | Domain | gromphadorhina.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 692 | Domain | gromphadorhina.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 693 | Domain | guill.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 694 | Domain | guirora.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 695 | Domain | haguret.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 696 | Domain | hajimari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 697 | Domain | hamadryas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 698 | Domain | hamadryas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 699 | Domain | hansenul.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 700 | Domain | haromo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 701 | Domain | hazari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 702 | Domain | heliconiinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 703 | Domain | heliconiinae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 704 | Domain | herica.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 705 | Domain | herumot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 706 | Domain | hesperiidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 707 | Domain | hesperiidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 708 | Domain | heteroptera.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 709 | Domain | heteroptera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 710 | Domain | hibigaru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 711 | Domain | hierodula.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 712 | Domain | hierodula.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 713 | Domain | hilotrapa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 714 | Domain | hilotrapa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 715 | Domain | hilotras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 716 | Domain | hilus.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 717 | Domain | hirube.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 718 | Domain | hiskolan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 719 | Domain | historap.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 720 | Domain | historyna.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 721 | Domain | hkol.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 722 | Domain | hokoldar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 723 | Domain | holitar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 724 | Domain | holorotop.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 725 | Domain | holorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 726 | Domain | holotran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 727 | Domain | holpantra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 728 | Domain | holposta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 729 | Domain | homoptera.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 730 | Domain | homoptera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 731 | Domain | hopfar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 732 | Domain | horiton.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 733 | Domain | horoton.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 734 | Domain | hortoban.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 735 | Domain | hoshiku.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 736 | Domain | hostarama.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 737 | Domain | hotornas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 738 | Domain | hoturna.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 739 | Domain | hpoi.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 740 | Domain | huntavo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 741 | Domain | hurama.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 742 | Domain | husilan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 743 | Domain | huskari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 744 | Domain | hustorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 745 | Domain | hustram.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 746 | Domain | hymenoptera.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 747 | Domain | hymenoptera.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 748 | Domain | ibigao.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 749 | Domain | ichia.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 750 | Domain | ichiella.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 751 | Domain | idaite.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 752 | Domain | ienaike.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 753 | Domain | iermo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 754 | Domain | iersin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 755 | Domain | ikademo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 756 | Domain | ikaramo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 757 | Domain | ikaraur.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 758 | Domain | inachis.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 759 | Domain | inachis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 760 | Domain | ineari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 761 | Domain | inosokof.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 762 | Domain | insomniar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 763 | Domain | ishinde.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 764 | Domain | ismetroh.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 765 | Domain | itsuke.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 766 | Domain | iwonaz.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 767 | Domain | jabilen.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 768 | Domain | jipitor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 769 | Domain | jittome.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 770 | Domain | jofarti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 771 | Domain | jokolor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 772 | Domain | jokrista.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 773 | Domain | jortiska.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 774 | Domain | jupirest.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 775 | Domain | kallima.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 776 | Domain | kallima.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 777 | Domain | karamono.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 778 | Domain | karrid.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 779 | Domain | keiwakaw.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 780 | Domain | khjs.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 781 | Domain | khpf.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 782 | Domain | kiantor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 783 | Domain | kibou.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 784 | Domain | kiesoud.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 785 | Domain | kilogar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 786 | Domain | kilorta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 787 | Domain | kilotrofa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 788 | Domain | kimiga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 789 | Domain | kimige.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 790 | Domain | kiolart.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 791 | Domain | kippuno.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 792 | Domain | kitta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 793 | Domain | kjoi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 794 | Domain | klebsie.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 795 | Domain | klotrast.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 796 | Domain | koete.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 797 | Domain | kofukaku.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 798 | Domain | kolorato.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 799 | Domain | koloratos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 800 | Domain | kolotran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 801 | Domain | koltorist.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 802 | Domain | konoatari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 803 | Domain | konokini.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 804 | Domain | kopolotr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 805 | Domain | koporta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 806 | Domain | koprotas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 807 | Domain | koraseba.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 808 | Domain | korgant.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 809 | Domain | kovallin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 810 | Domain | kovalsko.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 811 | Domain | kozikra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 812 | Domain | krogis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 813 | Domain | kroviti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 814 | Domain | kucart.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 815 | Domain | kukarat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 816 | Domain | legasto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 817 | Domain | lenatara.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 818 | Domain | leonot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 819 | Domain | lepidopteras.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 820 | Domain | lepidopteras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 821 | Domain | leraer.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 822 | Domain | libasti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 823 | Domain | libellulat.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 824 | Domain | libellulat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 825 | Domain | libellulidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 826 | Domain | libellulidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 827 | Domain | libellus.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 828 | Domain | libre1.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 829 | Domain | libre2.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 830 | Domain | libre3.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 831 | Domain | libre4.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 832 | Domain | lighin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 833 | Domain | limenitidinae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 834 | Domain | limenitidinae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 835 | Domain | limenitis.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 836 | Domain | limenitis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 837 | Domain | linsoda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 838 | Domain | lipolys.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 839 | Domain | listohi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 840 | Domain | lophacris.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 841 | Domain | lophacris.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 842 | Domain | lorianar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 843 | Domain | lortova.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 844 | Domain | lotorda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 845 | Domain | lovelat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 846 | Domain | luminta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 847 | Domain | lycaenidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 848 | Domain | lycaenidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 849 | Domain | machic.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 850 | Domain | machiwo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 851 | Domain | macros2.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 852 | Domain | macros3.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 853 | Domain | macros4.space | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 854 | Domain | magipo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 855 | Domain | malitors.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 856 | Domain | mamberis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 857 | Domain | maniis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 858 | Domain | maniola.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 859 | Domain | maniola.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 860 | Domain | mantidae.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 861 | Domain | mantidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 862 | Domain | mantodeas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 863 | Domain | mantodeas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 864 | Domain | mapifa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 865 | Domain | maratis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 866 | Domain | marginto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 867 | Domain | marinos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 868 | Domain | marisut.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 869 | Domain | martusi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 870 | Domain | masshir.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 871 | Domain | maxrota.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 872 | Domain | meandrusas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 873 | Domain | meandrusas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 874 | Domain | megascolias.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 875 | Domain | megascolias.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 876 | Domain | megatos.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 877 | Domain | mekamiwo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 878 | Domain | meletis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 879 | Domain | melitaeas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 880 | Domain | melitaeas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 881 | Domain | merostomata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 882 | Domain | mesant.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 883 | Domain | mesant.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 884 | Domain | meshatr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 885 | Domain | metcalfas.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 886 | Domain | metcalfas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 887 | Domain | metronoc.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 888 | Domain | michis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 889 | Domain | midiatr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 890 | Domain | miharashi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 891 | Domain | mihardo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 892 | Domain | milopoda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 893 | Domain | minalis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 894 | Domain | mirabilisa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 895 | Domain | mirabits.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 896 | Domain | miragenails.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 897 | Domain | mirotas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 898 | Domain | miwosaga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 899 | Domain | miyago.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 900 | Domain | molodora.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 901 | Domain | molortasa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 902 | Domain | molorto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 903 | Domain | monask.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 904 | Domain | mondii.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 905 | Domain | monilia.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 906 | Domain | monily.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 907 | Domain | moonilar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 908 | Domain | morotrot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 909 | Domain | morphinaes.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 910 | Domain | morphinaes.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 911 | Domain | morphon.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 912 | Domain | morphon.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 913 | Domain | mortalin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 914 | Domain | motteiru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 915 | Domain | mouiik.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 916 | Domain | mtageri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 917 | Domain | mucora.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 918 | Domain | mudarist.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 919 | Domain | muhicha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 920 | Domain | mujakini.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 921 | Domain | murikon.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 922 | Domain | mycoba.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 923 | Domain | mycobar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 924 | Domain | mycodar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 925 | Domain | nagaimo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 926 | Domain | nakona.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 927 | Domain | nakushita.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 928 | Domain | naletovo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 929 | Domain | nalitoras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 930 | Domain | nattanda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 931 | Domain | nbator.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 932 | Domain | nedvizhimostdoma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 933 | Domain | nematoceras.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 934 | Domain | nematoceras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 935 | Domain | nemoiti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 936 | Domain | nerabis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 937 | Domain | nibuku.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 938 | Domain | nijinda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 939 | Domain | nilias.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 940 | Domain | ninobotte.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 941 | Domain | noctuidaes.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 942 | Domain | noctuidaes.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 943 | Domain | nodoka.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 944 | Domain | noiiano.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 945 | Domain | nokata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 946 | Domain | nokratis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 947 | Domain | nolortasto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 948 | Domain | nomadar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 949 | Domain | nomukou.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 950 | Domain | nonima.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 951 | Domain | nopaster.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 952 | Domain | nortogal.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 953 | Domain | nostikarta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 954 | Domain | nukegaran.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 955 | Domain | nymphalidaes.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 956 | Domain | nymphalidaes.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 957 | Domain | obacter.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 958 | Domain | oderas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 959 | Domain | oidium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 960 | Domain | omonae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 961 | Domain | omyca.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 962 | Domain | omyce.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 963 | Domain | onibacter.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 964 | Domain | onihik.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 965 | Domain | onili.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 966 | Domain | oninatt.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 967 | Domain | onoba.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 968 | Domain | ontroma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 969 | Domain | opoziko.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 970 | Domain | optivan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 971 | Domain | otpuli.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 972 | Domain | ouichi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 973 | Domain | oyamawo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 974 | Domain | oyoida.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 975 | Domain | padiska.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 976 | Domain | papiliot.online | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 977 | Domain | papiliot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 978 | Domain | peaakyt.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 979 | Domain | penicil.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 980 | Domain | perfrin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 981 | Domain | pertolka.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 982 | Domain | picalisy.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 983 | Domain | pirovot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 984 | Domain | pitanno.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 985 | Domain | plariun.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 986 | Domain | plateri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 987 | Domain | plortac.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 988 | Domain | podloka.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 989 | Domain | pokolas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 990 | Domain | polonti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 991 | Domain | polyphemus.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 992 | Domain | porolotas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 993 | Domain | portalahr.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 994 | Domain | portikos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 995 | Domain | potroka.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 996 | Domain | potrosiha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 997 | Domain | powerton.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 998 | Domain | poznari.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 999 | Domain | printinap.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1000 | Domain | prisonta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1001 | Domain | proteug.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1002 | Domain | proteusa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1003 | Domain | protimas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1004 | Domain | pseudon.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1005 | Domain | putrif.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1006 | Domain | rabilin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1007 | Domain | raidata.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1008 | Domain | rastani.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1009 | Domain | rategade.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1010 | Domain | rawaumi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1011 | Domain | reapart.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1012 | Domain | reftist.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1013 | Domain | rekishino.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1014 | Domain | ribicat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1015 | Domain | richia.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1016 | Domain | ricuma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1017 | Domain | rificum.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1018 | Domain | riontos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1019 | Domain | riumo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1020 | Domain | riumos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1021 | Domain | robact.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1022 | Domain | roquef.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1023 | Domain | ruchkalo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1024 | Domain | ruhodo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1025 | Domain | ryomy.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1026 | Domain | ryzento.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1027 | Domain | saihate.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1028 | Domain | sakinar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1029 | Domain | samayoi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1030 | Domain | sarium.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1031 | Domain | satiri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1032 | Domain | saturapa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1033 | Domain | scorpiones.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1034 | Domain | screato.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1035 | Domain | sehtord.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1036 | Domain | seigaiso.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1037 | Domain | seitoshi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1038 | Domain | selotra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1039 | Domain | semara.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1040 | Domain | senula.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1041 | Domain | sertopar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1042 | Domain | shermana.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1043 | Domain | shermano.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1044 | Domain | shitemo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1045 | Domain | shredova.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1046 | Domain | siderar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1047 | Domain | siella.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1048 | Domain | sikolar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1049 | Domain | sikolra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1050 | Domain | simfopar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1051 | Domain | sinia.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1052 | Domain | slovorti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1053 | Domain | solerat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1054 | Domain | sorawo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1055 | Domain | soredake.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1056 | Domain | sporog.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1057 | Domain | sporotri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1058 | Domain | ssinapa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1059 | Domain | stearo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1060 | Domain | strapido.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1061 | Domain | striman.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1062 | Domain | subterm.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1063 | Domain | subtila.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1064 | Domain | sumikko.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1065 | Domain | sundabokun.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1066 | Domain | surutu.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1067 | Domain | suzuite.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1068 | Domain | tagdesam.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1069 | Domain | taraii.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1070 | Domain | taramiet.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1071 | Domain | teasagaki.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1072 | Domain | telefar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1073 | Domain | tenosha.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1074 | Domain | teriuma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1075 | Domain | terminar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1076 | Domain | teushi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1077 | Domain | thermop.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1078 | Domain | timanar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1079 | Domain | timerto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1080 | Domain | titolora.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1081 | Domain | tnoi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1082 | Domain | tofordat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1083 | Domain | tomond.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1084 | Domain | torogat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1085 | Domain | torohota.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1086 | Domain | torvaldu.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1087 | Domain | tridiuma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1088 | Domain | trivargo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1089 | Domain | trobona.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1090 | Domain | trolato.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1091 | Domain | tropisti.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1092 | Domain | tsukiru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1093 | Domain | tsuzuketa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1094 | Domain | tuberci.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1095 | Domain | tubercur.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1096 | Domain | uchkuduko.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1097 | Domain | uconos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1098 | Domain | uharun.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1099 | Domain | urovista.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1100 | Domain | usherfat.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1101 | Domain | utemomac.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1102 | Domain | utrado.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1103 | Domain | uzumoreru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1104 | Domain | vadilops.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1105 | Domain | vamparo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1106 | Domain | vasitron.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1107 | Domain | verusa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1108 | Domain | vibrida.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1109 | Domain | vidarri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1110 | Domain | vnestri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1111 | Domain | vodagi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1112 | Domain | volotras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1113 | Domain | voranfi.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1114 | Domain | vosita.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1115 | Domain | vositra.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1116 | Domain | vostilo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1117 | Domain | wakatteru.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1118 | Domain | warau.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1119 | Domain | winial.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1120 | Domain | winialo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1121 | Domain | wokoras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1122 | Domain | womatte.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1123 | Domain | xantoma.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1124 | Domain | yazibo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1125 | Domain | yubikiri.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1126 | Domain | yumeto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1127 | Domain | yumewo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1128 | Domain | zamaniwa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1129 | Domain | zanulor.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1130 | Domain | zeinar.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1131 | Domain | zeinare.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1132 | Domain | zeralot.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1133 | Domain | zerotask.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1134 | Domain | znahis.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1135 | Domain | znakort.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1136 | Domain | zontigla.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1137 | Domain | zvustro.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1138 | Domain | zygost.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1139 | SHA256 | 490365b7579861fdef91aff3d83a1972657a35505b193f363b934faa7955132c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1140 | SHA256 | d7eb0d9cb1709f8e32827bc8d7ba93aa8b6cf55ac43917caeb08b76ba3d7e3c1 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1141 | SHA256 | 3c5fe61dfd3152af1ff814af0636cfd377f0c3fab53868fc3e19fd46b8a9e961 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1142 | SHA256 | 9a9d8cd54ee439d781ba9499ac1d4a878007c995f59f72ccaad4a7a6c3793938 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1143 | SHA256 | 3e1d17efe857c935869fc28ce94c3528f7f5232fcebd40442a7c3c388e3d69be | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1144 | SHA256 | 07698f9b727daec99c446525aca889fc086e3cf6e3c307afdd72adff0113ceb0 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1145 | SHA256 | 1164ba0688458c44b2063894100ecdc52221eb85b82a5044c55043e7918d4a19 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1146 | SHA256 | 28c5629b18b097015ef8c256a8a7f2019ddc1a362a92a0379dd5d0c98b0e33d3 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1147 | SHA256 | 803f8c5827e151d7571c06d1c1a8f0dca23cc2ff377efa6744e6a98f8c297c37 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1148 | SHA256 | 00e5afc3cd0760434f9812ac569e8c00c27a82ef4312e6290d351a88498efa8d | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1149 | SHA256 | 90548a2e2a8139805377bfcd3a0d8f044c2cbfa1be6f54eda9e798f0a27a2fb4 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1150 | SHA256 | 7de5526d2c3c48b3fd239c87f7ab3c4ce4b26077bbdbf05fc88a9b84d6fb309b | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1151 | SHA256 | c6236e293e6dc2ec419d24e81d810dc16a7dc162d8e5fc19e5c44b44f4819a18 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1152 | SHA256 | 7fb37a7ef155120320dbf63f781af32cc2c8db3e590c7472a44fe84d4128f3ec | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1153 | SHA256 | 6705f4b9ffabbf9f4a9b112286f194a05fe593e6076c5fcf9296624042823265 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1154 | SHA256 | 8831eb86996d4778be526a6fd281c98d624b155940aae463b45dda1c5f979f1c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1155 | SHA256 | 849c372906c0f9815832e8178a829b5196150bc402a0aa081e5621f336508292 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1156 | SHA256 | 8db529765e5df53e6c9f2614f21b4233fe43714f3438a4a7ec04e454c3662ab1 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1157 | SHA256 | edecec2c413770fa929937c04ecf889e5c58d562c6e08ef0bfcd65ce482d397c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1158 | SHA256 | af67c332c95d045f4847b06e70ed590d492ecf0e59da0244d117b02bb04cfc5a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1159 | SHA256 | ee818a51cc890bf80e81523a051c82293d6c57acf47f8ddccd667d12fc88cb45 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1160 | SHA256 | ef46fd0f387dcb8946e9be11535ac7c24d5c2380493deb4b1700b62f60ffc74d | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1161 | SHA256 | c77fb3d3053958ea3aa4419e2bf4d0caf14f6c74047216e789628d095cc9e733 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1162 | SHA256 | b7a814deba56c6905c72d744d02398d46b34e9d1d7d02b5a501b1bddaf566407 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1163 | IPv4 | 194.58.122.212 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1164 | IPv4 | 194.58.90.120 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1165 | IPv4 | 194.67.108.168 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1166 | IPv4 | 194.67.71.4 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1167 | IPv4 | 194.67.71.55 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1168 | IPv4 | 89.108.65.157 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1169 | IPv4 | 89.108.77.204 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1170 | IPv4 | 185.46.11.72 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1171 | IPv4 | 194.67.109.76 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1172 | IPv4 | 89.108.76.135 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1173 | IPv4 | 185.46.10.73 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1174 | IPv4 | 89.108.115.241 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1175 | IPv4 | 31.31.203.17 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1176 | IPv4 | 89.108.77.133 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1177 | IPv4 | 194.58.123.47 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1178 | IPv4 | 194.67.90.15 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1179 | IPv4 | 37.140.199.224 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1180 | IPv4 | 89.108.70.223 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1181 | IPv4 | 89.108.78.126 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1182 | IPv4 | 89.108.78.128 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1183 | IPv4 | 194.67.109.14 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1184 | IPv4 | 194.67.116.180 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1185 | IPv4 | 194.67.116.81 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1186 | IPv4 | 80.78.245.223 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1187 | IPv4 | 80.78.245.254 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1188 | IPv4 | 80.78.251.231 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1189 | IPv4 | 89.108.81.106 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1190 | IPv4 | 185.46.11.71 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1191 | IPv4 | 185.20.225.35 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1192 | IPv4 | 194.58.118.14 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1193 | IPv4 | 89.108.88.67 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1194 | IPv4 | 194.67.111.121 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1195 | IPv4 | 5.63.154.19 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1196 | IPv4 | 185.46.9.81 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1197 | IPv4 | 194.58.111.215 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1198 | IPv4 | 194.67.109.191 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1199 | IPv4 | 194.67.86.169 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1200 | IPv4 | 89.108.115.232 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1201 | IPv4 | 89.108.78.247 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1202 | IPv4 | 194.58.111.54 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1203 | IPv4 | 194.67.86.167 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1204 | IPv4 | 193.124.206.128 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1205 | IPv4 | 194.58.119.114 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1206 | IPv4 | 194.58.122.110 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1207 | IPv4 | 89.108.88.6 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1208 | IPv4 | 89.108.98.101 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1209 | IPv4 | 194.67.113.50 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1210 | IPv4 | 194.67.90.78 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1211 | IPv4 | 89.108.115.235 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1212 | IPv4 | 89.108.76.226 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1213 | IPv4 | 89.108.83.235 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1214 | IPv4 | 151.248.114.88 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1215 | IPv4 | 185.46.10.28 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1216 | IPv4 | 5.63.158.233 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1217 | IPv4 | 89.108.88.174 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1218 | IPv4 | 194.58.97.115 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1219 | IPv4 | 188.93.210.54 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1220 | IPv4 | 194.58.120.207 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1221 | IPv4 | 194.58.121.94 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1222 | IPv4 | 89.108.70.22 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1223 | IPv4 | 151.248.117.250 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1224 | IPv4 | 194.67.113.186 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1225 | IPv4 | 185.46.11.115 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1226 | IPv4 | 94.250.251.39 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1227 | IPv4 | 176.118.164.187 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1228 | IPv4 | 45.134.255.131 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1229 | IPv4 | 185.46.11.79 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1230 | IPv4 | 80.78.241.88 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1231 | IPv4 | 185.46.8.12 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1232 | IPv4 | 5.63.158.238 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1233 | IPv4 | 89.108.114.11 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1234 | IPv4 | 89.108.98.124 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1235 | IPv4 | 89.108.81.77 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1236 | IPv4 | 151.248.125.140 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1237 | IPv4 | 80.78.251.4 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1238 | IPv4 | 89.108.115.225 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1239 | IPv4 | 89.108.76.246 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1240 | IPv4 | 194.67.113.99 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1241 | IPv4 | 89.108.77.202 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1242 | IPv4 | 194.67.87.29 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1243 | IPv4 | 37.140.197.206 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1244 | IPv4 | 80.78.240.210 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1245 | IPv4 | 89.108.102.37 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1246 | IPv4 | 151.248.121.176 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1247 | IPv4 | 37.140.195.137 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1248 | IPv4 | 80.78.248.22 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1249 | IPv4 | 80.78.253.86 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1250 | IPv4 | 89.108.71.205 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1251 | IPv4 | 31.31.203.71 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1252 | IPv4 | 5.63.158.179 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1253 | IPv4 | 31.31.203.219 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1254 | IPv4 | 185.46.10.230 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1255 | IPv4 | 89.108.81.30 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1256 | IPv4 | 89.108.98.113 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1257 | IPv4 | 185.46.9.173 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1258 | IPv4 | 194.58.108.140 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1259 | IPv4 | 194.58.97.245 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1260 | IPv4 | 194.67.113.120 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1261 | IPv4 | 80.78.248.222 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1262 | IPv4 | 89.108.102.57 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1263 | IPv4 | 89.108.115.206 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1264 | IPv4 | 89.108.115.234 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1265 | IPv4 | 89.108.115.236 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1266 | IPv4 | 151.248.114.67 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1267 | IPv4 | 89.108.78.252 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1268 | IPv4 | 185.20.226.9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1269 | IPv4 | 194.67.104.232 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1270 | IPv4 | 185.20.224.218 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1271 | IPv4 | 80.78.253.196 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1272 | IPv4 | 80.78.251.191 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1273 | IPv4 | 194.67.116.250 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1274 | IPv4 | 37.140.197.55 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1275 | IPv4 | 5.63.152.233 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1276 | IPv4 | 80.78.244.199 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1277 | IPv4 | 80.78.248.167 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1278 | IPv4 | 89.108.76.95 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1279 | IPv4 | 89.108.79.13 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1280 | IPv4 | 185.46.10.86 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1281 | IPv4 | 194.58.108.14 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1282 | IPv4 | 89.108.88.15 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1283 | IPv4 | 185.46.10.17 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1284 | IPv4 | 185.46.10.250 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1285 | IPv4 | 194.67.116.51 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1286 | IPv4 | 195.140.146.128 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1287 | IPv4 | 176.118.164.159 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1288 | IPv4 | 185.20.224.168 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1289 | IPv4 | 185.46.9.133 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1290 | IPv4 | 194.67.109.90 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1291 | IPv4 | 80.78.253.26 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1292 | IPv4 | 89.108.81.210 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1293 | IPv4 | 194.58.119.99 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1294 | IPv4 | 89.108.81.8 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1295 | IPv4 | 89.108.83.23 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1296 | IPv4 | 89.108.81.201 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1297 | IPv4 | 194.67.93.85 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1298 | IPv4 | 80.78.245.89 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1299 | Domain | bacilluse.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1300 | Domain | bilargo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1301 | Domain | bokuwai.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1302 | Domain | cerambycidae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1303 | Domain | circulas.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1304 | Domain | coleopteras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1305 | Domain | danainae.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1306 | Domain | firasto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1307 | Domain | firtabo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1308 | Domain | gorigan.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1309 | Domain | jolotras.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1310 | Domain | krashand.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1311 | Domain | megatos.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1312 | Domain | moolin.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1313 | Domain | myces.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1314 | Domain | naniga.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1315 | Domain | nonimak.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1316 | Domain | phymateus.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1317 | Domain | teroba.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1318 | SHA256 | 23725c0994c065d9221fa3d6a91eb0693410dd2585c835c935db04b812b1486f | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1319 | SHA256 | f211e0eb49990edbb5de2bcf2f573ea6a0b6f3549e772fd16bf7cc214d924824 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1320 | SHA256 | 986905caada61f2ea4aebd5664ed71cc9109a3886b998d91433216f30dc6b0e7 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1321 | SHA256 | 029005b595c5b9f3c7ddb49883b325f8f0bf5d13b18010a38d04b15f227d2052 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1322 | SHA256 | 9d085a26813cd1aa43e12d9b90aeb24df6269db92b965f61d93a8018d6b8a0cf | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1323 | SHA256 | a01e12988448a5b26d1d1adecc2dda539b5842f6a7044f8803a52c8bb714cdb0 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1324 | SHA256 | a6867e9086a8f713a962238204a3266185de2cc3c662fba8d79f0e9b22ce8dd6 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1325 | SHA256 | 137bfe2977b719d92b87699d93c0f140d659e990b482bbc5301085003c2bd58c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1326 | SHA256 | 043d696c2199d61ee0a09be93e387498c6a53188c3e3ec20acfeccc9c9aeb251 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1327 | SHA256 | f08c54c4d8a470f96a0acf6aefeb95c49a8704a473d6105a921a18917e1747fa | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1328 | SHA256 | 6d4b97e74abf499fa983b73a1e6957eadb2ec6a83e206fff1ab863448e4262c6 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1329 | SHA256 | ac4ea751ca1382550efb2d3f4df9242f4541836b0e82deb49847f763afdf20ca | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1330 | SHA256 | 4b7aecb006b8d3543265fc051e9b435bc0a8bb2698d5351604263e52a0af4a7c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1331 | SHA256 | 0afce2247ffb53783259b7dc5a0afe04d918767c991db2da906277898fd80be5 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1332 | SHA256 | 8a8c1a292eeb404407a9fe90430663a6d17767e49d52107b60bc229c090a0ae9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1333 | SHA256 | eb1724d14397de8f9dca4720dada0195ebb99d72427703cabcb47b174a3bfea2 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1334 | SHA256 | 96ce576f383584e0a62225a91bb50fc7fd8efa068443c4785373c86f51d2e3eb | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1335 | SHA256 | e4d309735f5326a193844772fc65b186fd673436efab7c6fed9eb7e3d01b6f19 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1336 | SHA256 | 15099fc6aea1961164954033b397d773ebf4b3ef7a5567feb064329be6236a01 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1337 | SHA256 | 0e5b4e578788760701630a810d1920d510015367bf90c1eab4373d0c48a921d9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1338 | SHA256 | b3d68268bd4bb14b6d412cef2b12ae4f2a385c36600676c1a9988cf1e9256877 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1339 | SHA256 | b92dcbacbaaf0a05c805d31762cd4e45c912ba940c57b982939d79731cf97217 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1340 | SHA256 | 23d417cd0d3dc0517adb49b10ef11d53e173ae7b427dbb6a7ddf45180056c029 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1341 | SHA256 | a60df90504735f4e424ec0842e328181d7e93ac9ecd8193e892584871643bec7 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1342 | IPv4 | 70.34.204.141 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1343 | IPv4 | 80.78.254.238 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1344 | IPv4 | 83.166.247.185 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1345 | IPv4 | 176.57.208.203 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1346 | IPv4 | 188.225.87.166 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1347 | IPv4 | 89.108.79.91 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1348 | IPv4 | 89.108.78.82 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1349 | IPv4 | 70.34.194.31 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1350 | IPv4 | 134.0.112.117 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1351 | IPv4 | 104.238.189.186 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1352 | IPv4 | 194.58.121.225 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1353 | IPv4 | 217.69.4.51 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1354 | IPv4 | 194.67.109.164 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1355 | IPv4 | 92.242.62.254 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1356 | IPv4 | 185.46.10.143 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1357 | IPv4 | 185.251.91.137 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1358 | IPv4 | 94.228.120.181 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1359 | IPv4 | 92.242.62.132 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1360 | IPv4 | 217.25.89.191 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1361 | IPv4 | 194.67.90.215 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1362 | IPv4 | 92.242.62.181 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1363 | IPv4 | 176.118.164.124 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1364 | IPv4 | 188.225.58.233 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1365 | IPv4 | 83.166.247.110 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1366 | IPv4 | 178.21.11.23 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1367 | IPv4 | 188.225.42.206 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1368 | IPv4 | 70.34.194.123 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1369 | IPv4 | 92.242.62.45 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1370 | IPv4 | 45.32.149.8 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1371 | IPv4 | 194.58.103.22 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1372 | IPv4 | 92.242.62.96 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1373 | IPv4 | 185.193.143.11 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1374 | IPv4 | 83.166.242.108 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1375 | IPv4 | 216.238.69.137 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1376 | IPv4 | 188.225.44.76 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1377 | IPv4 | 70.34.199.214 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1378 | IPv4 | 92.242.62.186 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1379 | IPv4 | 109.200.159.45 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1380 | IPv4 | 194.67.86.240 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1381 | IPv4 | 188.225.44.181 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1382 | IPv4 | 194.180.174.46 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1383 | IPv4 | 217.69.0.35 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1384 | IPv4 | 109.234.38.232 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1385 | IPv4 | 89.108.98.125 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1386 | IPv4 | 193.164.150.111 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1387 | IPv4 | 194.58.92.102 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1388 | IPv4 | 95.179.221.147 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1389 | IPv4 | 70.34.197.185 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1390 | IPv4 | 70.34.198.226 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1391 | IPv4 | 80.78.244.124 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1392 | IPv4 | 188.225.25.132 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1393 | IPv4 | 185.193.143.70 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1394 | IPv4 | 31.40.251.171 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1395 | IPv4 | 87.249.49.103 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1396 | IPv4 | 194.58.98.215 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1397 | IPv4 | 92.255.76.169 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1398 | IPv4 | 194.67.110.89 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1399 | IPv4 | 92.242.62.112 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1400 | IPv4 | 178.20.44.214 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1401 | IPv4 | 70.34.195.75 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1402 | IPv4 | 37.140.199.20 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1403 | IPv4 | 194.67.116.67 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1404 | IPv4 | 83.166.250.21 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1405 | IPv4 | 70.34.204.74 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1406 | IPv4 | 70.34.208.32 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1407 | IPv4 | 193.164.150.121 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1408 | IPv4 | 31.40.251.145 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1409 | IPv4 | 95.179.221.114 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1410 | IPv4 | 151.248.116.243 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1411 | IPv4 | 5.63.154.128 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1412 | IPv4 | 92.53.97.145 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1413 | IPv4 | 188.225.44.138 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1414 | IPv4 | 188.225.43.174 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1415 | IPv4 | 95.179.223.56 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1416 | IPv4 | 176.118.165.76 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1417 | IPv4 | 89.223.123.121 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1418 | IPv4 | 70.34.202.55 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1419 | IPv4 | 195.62.53.63 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1420 | IPv4 | 80.78.241.253 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1421 | Domain | gloritapa.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1422 | Domain | gortisir.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1423 | Domain | gortomalo.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1424 | Domain | iruto.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1425 | Domain | langosta.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1426 | Domain | maizuko.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1427 | Domain | malgaloda.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1428 | Domain | rimien.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1429 | Domain | takak.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1430 | SHA256 | 74cb6c1c644972298471bff286c310e48f6b35c88b5908dbddfa163c85debdee | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1431 | SHA256 | 3dca96ef38d4b8d1dbb4afed43a22ace93cc3a0a105120d4cf637e6dafe129e9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1432 | SHA256 | ffb6d57d789d418ff1beb56111cc167276402a0059872236fa4d46bdfe1c0a13 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1433 | SHA256 | 535f533b1008a55c89cab7f4d4163e609d0d6e5b512002022d2634e74e84edf9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1434 | SHA256 | d93551a9fa3ad9bdbb0f10dd447046e03a29bbb36245ac4245b80d982a78a930 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1435 | SHA256 | bda512a34622dac188d6b93caad4d8e3667e4f6b1e9078d259ccea6f988c2320 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1436 | SHA256 | 96b9a11f2b4f8051083643da6bdc9e3952a91ad3f882cde2e4a8910726ffc09c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1437 | SHA256 | 652d9bc90cc1833f667508c7f794237a0945c875c61370e54c73073ba27e7c85 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1438 | SHA256 | 352b5ec506823ffc008e7b71b2968a282ea6ac08cf372ac23cc87d957ecbd889 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1439 | SHA256 | f8dcd730cd06b18dc109473b7dac83c4f74f5c0c864cecc80bbf9e8bae974d8e | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1440 | SHA256 | 280a55919e502ecb66082107374e5b71a534338a8a7c02680cc4f1f84a204d59 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1441 | SHA256 | 72086e3e2992e60f2fdd35049653478db397cad5b81c59789ce0aae0590ce78b | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1442 | SHA256 | f54c01295b27acf46f90ab22f23a5918be2a0cec329d55766a82e483b8cfeff3 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1443 | SHA256 | 884c15502dbd6fe6dd4fca322904a38bce117ab6ed102ab2da84dfb4064c3e44 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1444 | SHA256 | 8a9f45e819513fd02aa0521aea3a0d85490c91523227b130d7ff08d12b8820ae | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1445 | SHA256 | 3fede347c45eccd0967431b7496672d43b057a3a3e42dc2922421cb7f2457d43 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1446 | SHA256 | 42f8223ba588d510e2f2a00ca6500ba1b71684509f10695a156069876600ccdc | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1447 | SHA256 | 304de8f4548cb616c97fcc841132a704f449c5dae709e7d1fb25810e7136cb46 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1448 | SHA256 | 7c7c8548b7657c34e2b654919edbe848d460ab93630021e8e9743f8204cb0c76 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1449 | SHA256 | 0fb55f55ffca9927472f7ada8fdd9d84bc57108860be0f1c737d5111d3020b5a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1450 | SHA256 | 182ec5f3859a78ce0c42995ecf63a0e412ff189b02b57a20057d2886a9098d88 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1451 | SHA256 | 367117e3acf6317b4cec64e514d461f9e761146aca0cb6eed9ef5a1fb35b63cc | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1452 | SHA256 | e56254b6b78f0bdc82cddff15c49f5b56ffef9aa105f1aae435504d1cdfe3310 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1453 | SHA256 | 84e80cbe5e3b8c0f8cde4fcd1c72551f57c46334fcdb49c90eb8ff1b942d1438 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1454 | SHA256 | 2407793f8bd2b4f3b9b14c4227b6110e48bb0b5388d181cf9eaa9585f4d595b1 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1455 | SHA256 | 3aac1c049eb628e1c289d3fc3a209f9262ed4cef862a3e2157bd6f3b02cc4698 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1456 | SHA256 | 3e273cec5fd77784c72f90018f11e0690387c9fde93defca16a971c8396f64df | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1457 | SHA256 | ccd5f196de54ac8ba5d5c3612f8807091f6c23dd501fa64161a161849f65f2a2 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1458 | SHA256 | b9dd1e5ec018090b404dd7550d4423ff38ee1f016a5ab214f128544f5b399759 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1459 | SHA256 | 8762522851f33de2707725cd7a89879c0b0afbd32bd34e2ac4443e4cbf285640 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1460 | SHA256 | df70346afd410d3ba26eeeb0194fc7e6d427bfafef9a34b9efd49936ca9e273b | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1461 | SHA256 | 61e67302a85ff98eabc589572dbf3bf6e1012207d399b9f2b6b38527833e9198 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1462 | SHA256 | cbe1dbd167bccbf61ee8608092a767ce3fbfb5fe5f6e959848d9a8d9091402fb | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1463 | SHA256 | a67e5d562e754426e061c74b04af19d8f59a9bfe5134d5bb6ed4d429d022840a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1464 | Domain | moscowguarante.com | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1465 | Domain | mucoris.ru | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1466 | Domain | seemsurprise.com | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1467 | Domain | technec.org | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1468 | IPv4 | 124.15.125.1 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1469 | SHA256 | 4e9c8ef5e6391a9b4a705803dc8f2daaa72e3a448abd00fad36d34fe36f53887 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1470 | SHA256 | 32df8c49d6f89722c6aca8943883cfff3cdf34074e87ff48f7c96da5d732c02b | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1471 | SHA256 | a9799ed289b967be92f920616015e58ae6e27defaa48f377d3cd701d0915fe53 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1472 | SHA256 | 2da473d1f510d0ddbae074a6c13953863c25be479acedc899c5529ec55bd2a65 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1473 | SHA256 | fd204f552fcc0fc8d63650302742c2d9e32175eb9675f5e57eeb2012816519d5 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1474 | SHA256 | afcbaae700e1779d3e0abe52bf0f085945fc9b6935f7105706b1ab4a823f565f | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1475 | SHA256 | 72b7609e0871eb7418d64e38cb40d74dda17356c96572fcd524f8bd22274af4a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1476 | SHA256 | 63f3112aca7c36772cafac6482e4faece639035818be8f236e5f3f7b84ac420c | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1477 | SHA256 | c66ce9f228c9065a90b22bd71363a81d1a8f1d26eb5fe3815046eb42b72c0d5f | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1478 | SHA256 | 283937afa83ac2bfc38f8bb3478704ae65f372b52809def5782a697d1dbf4fd3 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1479 | SHA256 | 0911c20a123b21c077a12b43914ff2f8a1bccf5a983d0561004cf86a27b5154a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1480 | SHA256 | d2d3a5b67e275e7805f3216cb8d59cb8cfbd39798115ca504c5ad865a4fe52fb | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1481 | SHA256 | 002e1b63a76a7125772cbf2ffd69e80d4d6491d72376ff04dafeb8c3cdc43831 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1482 | SHA256 | b27372960d28d3f36c93988a0b6df9d3f8211b2a252cd375e179bb8a9b54559b | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1483 | SHA256 | ce02bba7857842bee8eb490ae2971926c9e0412dbd1efc5a2c173fc7f59bd1d2 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1484 | SHA256 | 2ef4275e4ca83f726839c7de922d8d60c3d1df292275f2a0afb252ef109aed42 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1485 | SHA256 | 8d27a625c033baf16a0c8cc1b32e5ab3720525d87b1f63e328e32bf60b03740a | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1486 | SHA256 | e3e98ec10a1ae7ce3c37cd6d4e79d12d9bbde1ac382809d17917786253cd7265 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1487 | SHA256 | c9ffc90487ddcb4bb0540ea4e2a1ce040740371bb0f3ad70e36824d486058349 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1488 | SHA256 | b6ff96193514aa11b6fc0e5d58e7dcdccedfa373ee4858a2da582e4eceae86c5 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1489 | SHA256 | 3974f0b347dd42c5bd9d695a965f2fdd5a03b232702cb1162aad11307b68b6d7 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1490 | SHA256 | 695fabf0d0f0750b3d53de361383038030752d07b5fc8d1ba6eb8b3e1e7964fa | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1491 | SHA256 | 0869881422aa20a93eb4567794d9c8bac175dcbb02e4e3f5591a81266ca94102 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1492 | SHA256 | a123c8bc9bb6a7254764aa69928d2fec6784493eb5904683636b369507124710 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1493 | SHA256 | 5c8e7b35e40fc6613a8ec304f36c9ea1986a51c65a0389445f90778e94fa15ed | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1494 | SHA256 | 2cf0408ed2819bbdb36b2fd113c64339ceee893dce971e723de3d01a3e3dadbb | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1495 | SHA256 | 5440415c4a1702084a7c49b7024d0c75b9528b71d1faa4c744e95435dad6b533 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1496 | SHA256 | 0e00837d95eac249c831e1bae314ea9aa1ac3a60e3fc018eb81f6e14e822b6c5 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1497 | SHA256 | 1d8a5b468c90eeb8d6787a2578e840c1f1ff275819fa2dd54d8072304b315178 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1498 | SHA256 | 5339f3468fa4bbb6b10073289b6cfe18b28b1db9c9d5e72c810e0435b1668e9f | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1499 | SHA256 | 6126072bac10935b539660b9879097889c52070816ecb3042f54c1d563bac6e0 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1500 | SHA256 | 93f3ff62452444c6c93f708ec9c110cfb0c630f462ea63db9abbe96a6053acb1 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1501 | SHA256 | ba96cfe58a5c8f4636b0a0668a9d9127eee3ed80c96db48d3a63ae9c6ce97b2d | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1502 | SHA256 | c5248a00ccee03a159fff2e30709c3b23fb47faa811959d3249bc347f7e34a80 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1503 | SHA256 | cb4963fb3a85766278426ebf4a00ae5c5d7576f21b35cfa0df1f9529073015a9 | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1504 | SHA256 | d60a4dfc2c48fd80957ee77ab0ec4221f67e3f92551c9c245292f56dbaf9912e | Gamaredon | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/Gamaredon_IoCs_JAN2022.txt | |
| 1505 | SHA256 | 19888c043afde1f63f25a807192170bc65377e6c89f693ad7af70c0a03a349ed | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1506 | SHA256 | 60539634489764d9e590433ef632727aa465075befcb4f2d4f60405c0f8e600c | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1507 | SHA256 | be7d70fb705c74f2de86db2b34f3e7587e5b3ded2d02eaad48fcfee426379372 | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1508 | SHA256 | 782a8cc34746ca1ffc7cd83a9cc4cd64c60de2e69622a06d2a01792df2e2573c | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1509 | SHA256 | 7c2c376300c1fc562521196458c2594edac152f1ad944c517927b5a12193980c | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1510 | SHA256 | 3d80541e59b4bedac6bd275514c0941b1478d62d6ef8b8560720d05a83c0a910 | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1511 | Domain | maonas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1512 | Domain | nastorlam.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1513 | Domain | nokitrav.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1514 | Domain | postoral.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1515 | Domain | rebatok.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1516 | Domain | sadotra.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1517 | Domain | lotorsas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1518 | Domain | diletras.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1519 | Domain | distorhan.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1520 | Domain | filopar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1521 | Domain | firatoska.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1522 | Domain | gartisop.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1523 | Domain | giltorad.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1524 | Domain | hikorto.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1525 | Domain | jenipot.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1526 | Domain | jistarka.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1527 | Domain | jolopar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1528 | Domain | koloparto.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1529 | Domain | koutora.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1530 | Domain | mavzolit.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1531 | Domain | milotor.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1532 | Domain | potrahid.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1533 | Domain | shaparto.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1534 | Domain | skripotan.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1535 | Domain | somebodar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1536 | Domain | turikar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1537 | Domain | vartogal.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1538 | Domain | bolotran.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1539 | Domain | corintar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1540 | Domain | drumtar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1541 | Domain | filikato.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1542 | Domain | fortuskan.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1543 | Domain | giboltar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1544 | Domain | giroed.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1545 | Domain | golitus.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1546 | Domain | hikorta.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1547 | Domain | holotras.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1548 | Domain | hotilar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1549 | Domain | kassanfo.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1550 | Domain | kolopart.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1551 | Domain | kolotara.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1552 | Domain | lestori.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1553 | Domain | mafdis.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1554 | Domain | mirtokla.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1555 | Domain | nintara.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1556 | Domain | ringali.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1557 | Domain | tirotar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1558 | Domain | videotri.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1559 | Domain | vivaldar.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1560 | Domain | emailinfo.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1561 | Domain | downloadfiles.website | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1562 | Domain | email-inbox.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1563 | Domain | ukrnet.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1564 | Domain | settings-ukr.net | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1565 | Domain | email-smtp.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1566 | Domain | assasysa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1567 | Domain | eyeofra.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1568 | Domain | email-info.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1569 | Domain | acridoxena.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1570 | Domain | hewaniana.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1571 | Domain | erythrocephala.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1572 | Domain | acantholyda.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1573 | Domain | severodoneck.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1574 | Domain | admin-gmail.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1575 | Domain | account-google.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1576 | Domain | file-check.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1577 | Domain | sebaer.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1578 | Domain | triturus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1579 | Domain | taphrometopon.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1580 | Domain | splendensi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1581 | Domain | schrenchi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1582 | Domain | salamandras.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1583 | Domain | rutilus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1584 | Domain | reticulatus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1585 | Domain | pugnax.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1586 | Domain | molurus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1587 | Domain | maculosa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1588 | Domain | lineolatum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1589 | Domain | glanisa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1590 | Domain | cristatus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1591 | Domain | chaetodon.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1592 | Domain | bettar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1593 | Domain | mesogonistius.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1594 | Domain | temporaria.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1595 | Domain | reinvardtii.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1596 | Domain | macropodus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1597 | Domain | lotari.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1598 | Domain | fluviatilis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1599 | Domain | ridibunda.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1600 | Domain | ranar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1601 | Domain | mystaceus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1602 | Domain | arvalis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1603 | Domain | carassiusis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1604 | Domain | phyllomedusa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1605 | Domain | hypochondralis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1606 | Domain | gastrotheca.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1607 | Domain | callichthys.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1608 | Domain | sclerops.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1609 | Domain | phrynocephalus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1610 | Domain | ophisaurusis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1611 | Domain | niloticu.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1612 | Domain | marsupiata.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1613 | Domain | jordanella.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1614 | Domain | igneus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1615 | Domain | hylar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1616 | Domain | gibelio.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1617 | Domain | geophagusi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1618 | Domain | gasterosteus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1619 | Domain | floridae.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1620 | Domain | crocodilus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1621 | Domain | carassiuss.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1622 | Domain | caimana.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1623 | Domain | brasiliensisi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1624 | Domain | bombinators.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1625 | Domain | avratus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1626 | Domain | auratus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1627 | Domain | apusa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1628 | Domain | aculeatus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1629 | Domain | ua-email.press | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1630 | Domain | rhinoderma.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1631 | Domain | pipasa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1632 | Domain | ophisaurus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1633 | Domain | obstetricans.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1634 | Domain | darvini.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1635 | Domain | bufol.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1636 | Domain | bombinator.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1637 | Domain | apusi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1638 | Domain | alytes.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1639 | Domain | trichopodus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1640 | Domain | gavialis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1641 | Domain | trichopterus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1642 | Domain | leeri.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1643 | Domain | eversmanni.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1644 | Domain | scincus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1645 | Domain | rhodeus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1646 | Domain | nemachilus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1647 | Domain | murinus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1648 | Domain | misgurnus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1649 | Domain | lebetina.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1650 | Domain | horridus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1651 | Domain | gymnodactylus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1652 | Domain | griseus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1653 | Domain | gangeticus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1654 | Domain | fragilis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1655 | Domain | fossilis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1656 | Domain | crossobamon.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1657 | Domain | caspius.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1658 | Domain | berus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1659 | Domain | barbatulus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1660 | Domain | anguisa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1661 | Domain | amarus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1662 | Domain | ambystoma.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1663 | Domain | alligatori.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1664 | Domain | agamat.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1665 | Domain | acaciana.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1666 | Domain | adonisis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1667 | Domain | bartli.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1668 | Domain | achilleas.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1669 | Domain | camphorat.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1670 | Domain | acorusis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1671 | Domain | willder.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1672 | Domain | wallich.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1673 | Domain | vernalisa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1674 | Domain | senegala.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1675 | Domain | precatoriusis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1676 | Domain | millefolium.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1677 | Domain | ferrox.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1678 | Domain | cynapiuma.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1679 | Domain | calamusi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1680 | Domain | betulina.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1681 | Domain | barosma.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1682 | Domain | aethusas.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1683 | Domain | adonisi.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1684 | Domain | abrusa.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1685 | Domain | anamirtat.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1686 | Domain | althaean.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1687 | Domain | silvestris.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1688 | Domain | occidentale.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1689 | Domain | montanar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1690 | Domain | macrotomias.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1691 | Domain | hypogaeat.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1692 | Domain | cotular.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1693 | Domain | cephalotes.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1694 | Domain | catechur.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1695 | Domain | arvensis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1696 | Domain | anthriscus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1697 | Domain | alpiniar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1698 | Domain | artemisian.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1699 | Domain | absinthiuma.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1700 | Domain | oleifera.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1701 | Domain | juncear.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1702 | Domain | hiemalis.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1703 | Domain | papayana.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1704 | Domain | kyiv-mail.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1705 | Domain | maculatum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1706 | Domain | claviceps.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1707 | Domain | autumnale.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1708 | Domain | fionar.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1709 | Domain | eluteria.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1710 | Domain | coriandrum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1711 | Domain | settings-google.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1712 | Domain | cyminum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1713 | Domain | dracod.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1714 | Domain | cuminum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1715 | Domain | calamuss.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1716 | Domain | duboisia.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1717 | Domain | dipterocarpus.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1718 | Domain | cardamomum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1719 | Domain | capillaceum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1720 | Domain | buhse.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1721 | Domain | boiss.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1722 | Domain | aspidium.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1723 | Domain | ammoniacum.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1724 | Domain | blockpost.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1725 | Domain | blockpost.website | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1726 | Domain | blockpost.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1727 | Domain | gelsemium.xyz | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1728 | Domain | canadensis.website | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1729 | Domain | barbadense.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1730 | Domain | abyssinica.website | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1731 | Domain | bitsbitsk.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1732 | Domain | bitsbitsi.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1733 | Domain | bitsbitsl.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1734 | Domain | bitsbitsc.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1735 | Domain | bitsbitsd.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1736 | Domain | bitsbitsb.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1737 | Domain | bitsbitsa.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1738 | Domain | metrika.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1739 | Domain | ardinvest.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1740 | Domain | bitsadmin4.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1741 | Domain | email-gov.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1742 | Domain | mil-gov.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1743 | Domain | bitsadmin3.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1744 | Domain | adblocked.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1745 | Domain | bitsadmin2.space | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1746 | Domain | artisola.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1747 | Domain | lotorgas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1748 | Domain | gitrostan.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1749 | Domain | retarus.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1750 | Domain | calendas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1751 | Domain | corolain.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1752 | Domain | goloser.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1753 | Domain | alacritas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1754 | Domain | acetica.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1755 | Domain | mail-check.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1756 | Domain | word-expert.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1757 | Domain | libellus.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1758 | Domain | barbatas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1759 | Domain | floundera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1760 | Domain | plaicer.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1761 | Domain | barbatas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1762 | Domain | ferruminatio.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1763 | Domain | privigna.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1764 | Domain | mullus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1765 | Domain | sardanal.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1766 | Domain | puppis.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1767 | Domain | goatfish.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1768 | Domain | libellus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1769 | Domain | mulleti.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1770 | Domain | puppis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1771 | Domain | tectaconstrata.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1772 | Domain | barbatam.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1773 | Domain | mullus.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1774 | Domain | barbatus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1775 | Domain | ferruminatio.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1776 | Domain | sardanal.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1777 | Domain | privigna.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1778 | Domain | tectaconstrata.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1779 | Domain | solerat.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1780 | Domain | plaicer.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1781 | Domain | mulleti.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1782 | Domain | goatfish.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1783 | Domain | flatfisha.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1784 | Domain | bonitol.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1785 | Domain | neslovo.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1786 | Domain | coagula.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1787 | Domain | phymateus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1788 | Domain | tortunas.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1789 | Domain | upload-dt.hopto.org | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1790 | Domain | upload-lk.hopto.org | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1791 | Domain | up-dot.hopto.org | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1792 | Domain | up-lnk.hopto.org | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1793 | Domain | abrumpere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1794 | Domain | acanthophis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1795 | Domain | acetobacter.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1796 | Domain | achalinus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1797 | Domain | acrididae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1798 | Domain | agaricusa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1799 | Domain | albatrellus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1800 | Domain | alburnus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1801 | Domain | alicui.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1802 | Domain | anisoptera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1803 | Domain | anolis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1804 | Domain | antarcticus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1805 | Domain | apaturinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1806 | Domain | apidaet.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1807 | Domain | apoxipodes.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1808 | Domain | arachnidas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1809 | Domain | archaicus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1810 | Domain | archiepiscopus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1811 | Domain | arctiidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1812 | Domain | asilidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1813 | Domain | asymmetria.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1814 | Domain | atlanticos.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1815 | Domain | babylont.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1816 | Domain | bacilluse.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1817 | Domain | biblidinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1818 | Domain | blaberidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1819 | Domain | blattodea.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1820 | Domain | boniton.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1821 | Domain | botaurus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1822 | Domain | brachycera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1823 | Domain | burhinus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1824 | Domain | campestri.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1825 | Domain | carinatus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1826 | Domain | carolinensis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1827 | Domain | cerambycidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1828 | Domain | cereusi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1829 | Domain | chelicerata.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1830 | Domain | cichlasoma.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1831 | Domain | ciconiat.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1832 | Domain | circulas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1833 | Domain | clonorchis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1834 | Domain | clupeonella.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1835 | Domain | coeruleus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1836 | Domain | coleopteras.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1837 | Domain | coliadinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1838 | Domain | cololabis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1839 | Domain | conscindere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1840 | Domain | corvusi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1841 | Domain | cultiventris.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1842 | Domain | cyrestinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1843 | Domain | danainae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1844 | Domain | decursio.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1845 | Domain | differre.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1846 | Domain | difformis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1847 | Domain | dionysi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1848 | Domain | dipteran.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1849 | Domain | discedere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1850 | Domain | discouti.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1851 | Domain | discrepare.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1852 | Domain | disjungere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1853 | Domain | diversiformis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1854 | Domain | dividere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1855 | Domain | email-online.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1856 | Domain | empusidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1857 | Domain | emysi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1858 | Domain | eryxis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1859 | Domain | eurypterida.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1860 | Domain | extrado.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1861 | Domain | exundare.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1862 | Domain | facetum.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1863 | Domain | fanniidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1864 | Domain | fasciolas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1865 | Domain | felineus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1866 | Domain | flatfish.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1867 | Domain | flounder.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1868 | Domain | fnhn.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1869 | Domain | fnrn.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1870 | Domain | formosanus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1871 | Domain | fossor.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1872 | Domain | goatfish.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1873 | Domain | golintras.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1874 | Domain | gonepteryx.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1875 | Domain | gorimana.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1876 | Domain | gov-ua.pw | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1877 | Domain | graeca.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1878 | Domain | graphiuma.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1879 | Domain | graphosoma.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1880 | Domain | gromphadorhina.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1881 | Domain | gurmou.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1882 | Domain | hakena.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1883 | Domain | halibut.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1884 | Domain | hamadryas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1885 | Domain | haplochromis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1886 | Domain | heliconiinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1887 | Domain | hepatica.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1888 | Domain | herpetodryas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1889 | Domain | herrings.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1890 | Domain | hesperiidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1891 | Domain | heteroptera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1892 | Domain | heterotypus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1893 | Domain | hierodula.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1894 | Domain | hippoglossus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1895 | Domain | hkjn.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1896 | Domain | hkol.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1897 | Domain | hohlomida.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1898 | Domain | holodosiz.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1899 | Domain | homoptera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1900 | Domain | horivana.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1901 | Domain | hpoi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1902 | Domain | hymenoptera.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1903 | Domain | id-metrika.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1904 | Domain | inachis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1905 | Domain | incursio.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1906 | Domain | incursionibus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1907 | Domain | incursus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1908 | Domain | intumescere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1909 | Domain | irritabilitas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1910 | Domain | jaculusan.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1911 | Domain | kallima.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1912 | Domain | khjs.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1913 | Domain | khpf.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1914 | Domain | kjoi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1915 | Domain | labefacere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1916 | Domain | labefactare.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1917 | Domain | lacerare.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1918 | Domain | latesa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1919 | Domain | lepidopteras.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1920 | Domain | libellulat.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1921 | Domain | libellulidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1922 | Domain | limenitidinae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1923 | Domain | limenitis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1924 | Domain | limosa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1925 | Domain | limulusa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1926 | Domain | lophacris.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1927 | Domain | lovarinda.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1928 | Domain | lusciniar.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1929 | Domain | lycaenidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1930 | Domain | mackereli.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1931 | Domain | maniola.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1932 | Domain | mantidae.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1933 | Domain | mantodeas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1934 | Domain | meandrusas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1935 | Domain | megascolias.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1936 | Domain | megatos.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1937 | Domain | melitaeas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1938 | Domain | merostomata.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1939 | Domain | mesant.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1940 | Domain | metcalfas.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1941 | Domain | morphinaes.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1942 | Domain | morphon.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1943 | Domain | mortivan.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1944 | Domain | mugil.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1945 | Domain | mulletin.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1946 | Domain | natrixy.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1947 | Domain | nematoceras.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1948 | Domain | nilesa.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1949 | Domain | niloticus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1950 | Domain | noctuidaes.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1951 | Domain | nymphalidaes.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1952 | Domain | office360-expert.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1953 | Domain | orbicularis.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1954 | Domain | ovinus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1955 | Domain | panchax.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1956 | Domain | papiliot.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1957 | Domain | perchi.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1958 | Domain | petulans.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1959 | Domain | pfkj.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1960 | Domain | pilcharda.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1961 | Domain | plaices.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1962 | Domain | plantora.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1963 | Domain | polyphemus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1964 | Domain | pomfreti.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1965 | Domain | portunio.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1966 | Domain | rainbowt.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1967 | Domain | regionem.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1968 | Domain | rufescens.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1969 | Domain | rumpere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1970 | Domain | sairanat.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1971 | Domain | salmoni.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1972 | Domain | saltator.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1973 | Domain | saury.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1974 | Domain | sauryn.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1975 | Domain | scolopaxys.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1976 | Domain | scorpiones.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1977 | Domain | shaperi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1978 | Domain | silvicol.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1979 | Domain | sinensisa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1980 | Domain | soled.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1981 | Domain | sphaerion.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1982 | Domain | sprata.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1983 | Domain | sprata.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1984 | Domain | spratan.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1985 | Domain | stealheada.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1986 | Domain | stellarisa.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1987 | Domain | strigigena.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1988 | Domain | suaveolens.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1989 | Domain | sufflari.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1990 | Domain | suffundi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1991 | Domain | suffunditur.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1992 | Domain | superfluere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1993 | Domain | superfundi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1994 | Domain | superventus.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1995 | Domain | testudos.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1996 | Domain | tilapian.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1997 | Domain | tnoi.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1998 | Domain | trouta.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 1999 | Domain | tunara.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2000 | Domain | turgescere.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2001 | Domain | ugorado.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2002 | Domain | usa-national.info | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2003 | Domain | variare.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2004 | Domain | vincula.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2005 | Domain | viraglo.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2006 | Domain | vitrokaz.site | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2007 | Domain | who-int.info | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2008 | Domain | xiphosura.online | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2009 | Domain | votifa.ru | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2010 | Domain | normandia.fun | Gamaredon / PrimitiveBear | hxxps://github[.]com/pan-unit42/iocs/blob/master/Gamaredon/2022_02_Gamaredon_UPDATE.txt | |
| 2011 | SHA1 | 23873bf2670cf64c2440058130548d4e4da412dd | Win32/RiskWare.RemoteAdmin.RemoteExec.AC | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2012 | SHA1 | 3c54c9a49a8ddca02189fe15fea52fe24f41a86f | Win32/GenCBL.BSP | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2013 | SHA1 | 61b25d11392172e587d8da3045812a66c3385451 | Win32/KillDisk.NCV | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2014 | SHA1 | 736a4cfad1ed83a6a0b75b0474d5e01a3a36f950 | Win32/KillMBR.NHQ | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2015 | SHA1 | 912342f1c840a42f6b74132f8a7c4ffe7d40fb77 | Win32/KillDisk.NCV | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2016 | SHA1 | ad602039c6f0237d4a997d5640e92ce5e2b3bba3 | Win32/KillMBR.NHP | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2017 | SHA1 | e9b96e9b86fad28d950ca428879168e0894d854f | Win32/KillMBR.NHP | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2018 | SHA1 | f32d791ec9e6385a91b45942c230f52aff1626df | WinGo/Filecoder.BK | hxxps://www[.]welivesecurity[.]com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/ | |
| 2019 | SHA256 | 1561ece482c78a2d587b66c8eaf211e806ff438e506fcef8f14ae367db82d9b3 | XLS email attachment | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2020 | SHA256 | 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2021 | SHA256 | 20180a8012970453daef6db45b2978fd962d2168fb3b2b1580da3af6465fe2f6 | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2022 | SHA256 | 269526c11dbb25b1b4b13eec4e7577e15de33ca18afa70a2be5f373b771bd1ab | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2023 | SHA256 | 2e1de7b61ed25579e796ec4c0df2e25d2b98a1f8d4fdb077e2b52ee06c768fca | Malicious MSI package | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2024 | SHA256 | 303e004364b1beda0338eb10a845e6b0965ca9fa8ee16fa9f3a3c6ef03c6939f | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2025 | SHA256 | 31d765deae26fb5cb506635754c700c57f9bd0fc643a622dc0911c42bf93d18f | Malicious MSI package | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2026 | SHA256 | 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269 | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2027 | SHA256 | 3694f63e5093183972ed46c6bef5c63e0548f743a8fa6bb6983dcf107cab9044 | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2028 | SHA256 | 5b317f27ad1e2c641f85bef601740b65e93f28df06ed03daa1f98d0aa5e69cf0 | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2029 | SHA256 | 737f08702f00e78dbe78acbeda63b73d04c1f8e741c5282a9aa1409369b6efa8 | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2030 | SHA256 | 7bf33b494c70bd0a0a865b5fbcee0c58fa9274b8741b03695b45998bcd459328 | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2031 | SHA256 | 976b7b17f2663fee38d4c4b1c251269f862785b17343f34479732bf9ddd29657 | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2032 | SHA256 | 9aa3ca96a84eb5606694adb58776c9e926020ef184828b6f7e6f9b50498f7071 | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2033 | SHA256 | a8fd0a5de66fa39056c0ddf2ec74ccd38b2ede147afa602aba00a3f0b55a88e0 | XLS email attachment | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2034 | SHA256 | b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29 | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2035 | SHA256 | d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2036 | SHA256 | e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a | Malicious LUA script | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2037 | SHA256 | f97f26f9cb210c0fcf2b50b7b9c8c93192b420cdbd946226ec2848fd19a9af2c | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2038 | SHA256 | fbbe7ee073d0290ac13c98b92a8405ea04dcc6837b4144889885dd70679e933f | Malicious DLL file | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2039 | IPv4 | 157.230.104.79 | Stager server | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2040 | IPv4 | 45.61.137.231 | C2 server | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2041 | IPv4 | 84.32.188.96 | C2 server | hxxps://www[.]proofpoint[.]com/us/blog/threat-insight/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails | |
| 2042 | SHA256 | 7ea65c1cb2687be42f427571e3223e425d602d043c39f690d0c3c42309aff513 | DanaBot loader | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2043 | IPv4 | 192.236.161.4 | DanaBot C2 server | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2044 | IPv4 | 23.106.122.14 | DanaBot C2 server | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2045 | IPv4 | 5.9.224.217 | DanaBot C2 server | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2046 | Domain | ockiwumgv77jgrppj4na362q4z6flsm3uno5td423jj4lj2f2meqt6ad.onion | DanaBot C2 server | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2047 | SHA256 | b61cd7dc3af4b5b56412d62f37985e8a4e23c64b1908e39510bc8e264ebad700 | DDoS tool | hxxps://www[.]zscaler[.]com/blogs/security-research/danabot-launches-ddos-attack-against-ukrainian-ministry-defense | |
| 2048 | Domain | help-for-ukraine[.]eu | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2049 | Domain | tokenukraine[.]com | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2050 | Domain | ukrainesolidarity[.]org | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2051 | Domain | ukraine-solidarity[.]com | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2052 | Domain | saveukraine[.]today | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2053 | Domain | supportukraine[.]today | Scam Domain Stealing Donations | hxxps://msrc-blog[.]microsoft[.]com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine | |
| 2054 | MD5 | ffa2ac5a69c7ace2a10d749a6f881f92 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2055 | SHA1 | 771e941ed6ea15df30b9405a233b15da937a3d41 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2056 | SHA1 | ff86ee00297625c36492661a61af33b19ded1612 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2057 | SHA256 | 82473f3c78d0243f759552027033f81e1ceb7fc3317c235264c9102f87669122 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2058 | IPv4 | 103.167.92.57 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2059 | IPv4 | 217.26.48.101 | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2060 | URL | hxxp://103[.]167[.]92[.]57/space360/vbc.exe | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2061 | domain | project66bug.com | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2062 | domain | spiritpriest.com | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2063 | domain | themarketingstinger.com | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2064 | domain | un2030.com | Formbook Infostealer targets Ukraine | hxxps://otx.alienvault[.]com/pulse/6222096d5505582bf113ccb7 | |
| 2065 | jowhar@xintongwood.club | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2066 | babu.d@tvsrubber.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2067 | citi.in.pm@xerago.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2068 | dean.ds@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2069 | in-nonciti.basupport@xerago.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2070 | info@empiink.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2071 | narayanababu.py.ph@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2072 | nshcorp@nshcorp.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2073 | omars@salecharter.net | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2074 | pooja.fa@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2075 | productionbelgavi@hodekindia.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2076 | purchase2@hitechelastomers.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2077 | qs@gsengint.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2078 | rakesh.ict@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2079 | roopa.tsld@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2080 | sec.ls@msruas.ac.in | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2081 | systeam@xerago.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2082 | vaishnavi.kj@tvsrubber.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317539153738683 | ||
| 2083 | muthuprakash.b@tvsrubber.com | Mailbox leveraged by Russian APTs | hxxps://www.facebook[.]com/UACERT/posts/317482093744389 | ||
| 2084 | URL | hxxp://consumerspanel[.]frge.io/ | Phishing page targeting Ukraine | hxxps://www.facebook[.]com/UACERT/posts/317482093744389 | |
| 2085 | Domain | consumerspanel[.]frge.io | Phishing page targeting Ukraine | hxxps://www.facebook[.]com/UACERT/posts/317482093744389 | |
| 2086 | MD5 | 2556a9e1d5e9874171f51620e5c5e09a | "dovidka.chm" Phishing attachment | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2087 | MD5 | e34d6387d3ab063b0d926ac1fca8c4c4 | "???????.zip" Phishing attachment | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2088 | MD5 | a9dcaf1c709f96bc125c8d1262bac4b6 | "Desktop.ini" Configuration file | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2089 | MD5 | bd65d0d59f6127b28f0af8a7f2619588 | "ignit.vbs" Malicious script | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2090 | MD5 | d2a795af12e937eb8a89d470a96f15a5 | "core.dll" Malicious DLL | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2091 | MD5 | fb418bb5bd3e592651d0a4f9ae668962 | "Windows Prefetch.lnk" Malicious LNK | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2092 | Domain | xbeta.online | C2 server | hxxps://twitter.com/h2jazi/status/1500607147989684224 | |
| 2093 | IPv4 | 185.175.158.27 | C2 server | hxxps://twitter.com/cluster25_io/status/1499678960782823432 | |
| 2094 | MD5 | 65237e705e842da0a891c222e57fe095 | microbackdoor.dll (MicroBackdoor) | hxxps://cert.gov.ua/article/37626 | |
| 2095 | Hostname | id-unconfirmeduser[.]frge[.]io | FancyBear/APT28 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2096 | Hostname | hatdfg-rhgreh684[.]frge[.]io | FancyBear/APT28 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2097 | Hostname | ua-consumerpanel[.]frge[.]io | FancyBear/APT28 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2098 | Hostname | consumerspanel[.]frge[.]io | FancyBear/APT28 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2099 | Hostname | accounts[.]secure-ua[.]website | Ghostwriter/UNC1151 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2100 | Hostname | i[.]ua-passport[.]tope | Ghostwriter/UNC1151 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2101 | Hostname | login[.]creditals-email[.]space | Ghostwriter/UNC1151 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2102 | Hostname | post[.]mil-gov[.]space | Ghostwriter/UNC1151 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2103 | Hostname | verify[.]rambler-profile[.]site | Ghostwriter/UNC1151 | hxxps://blog.google/threat-analysis-group/update-threat-landscape-ukraine | |
| 2104 | URL | hxxps://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe | UAC-0056 group | hxxps://cert.gov.ua/article/37704 | |
| 2105 | URL | hxxps://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe | UAC-0056 group | hxxps://cert.gov.ua/article/37705 | |
| 2106 | URL | hxxps://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe | UAC-0056 group | hxxps://cert.gov.ua/article/37706 | |
| 2107 | IPv4 | 156.146.50.5 | UAC-0056 group | hxxps://cert.gov.ua/article/37707 | |
| 2108 | MD5 | 15c525b74b7251cfa1f7c471975f3f95 | (Go downloader) UAC-0056 group | hxxps://cert.gov.ua/article/37708 | |
| 2109 | MD5 | 2fdf9f3a25e039a41e743e19550d4040 | (Discord downloader) UAC-0056 group | hxxps://cert.gov.ua/article/37709 | |
| 2110 | MD5 | 4f11abdb96be36e3806bada5b8b2b8f8 | (GrimPlant) UAC-0056 group | hxxps://cert.gov.ua/article/37710 | |
| 2111 | MD5 | 9ad4a2dfd4cb49ef55f2acd320659b83 | (Discord downloader) UAC-0056 group | hxxps://cert.gov.ua/article/37711 | |
| 2112 | MD5 | 9ea3aaaeb15a074cd617ee1dfdda2c26 | (GraphSteel) UAC-0056 group | hxxps://cert.gov.ua/article/37712 | |
| 2113 | MD5 | aa5e8268e741346c76ebfd1f27941a14 | (Cobalt Strike Beacon) UAC-0056 group | hxxps://cert.gov.ua/article/37713 | |
| 2114 | MD5 | b8b7a10dcc0dad157191620b5d4e5312 | UAC-0056 group | hxxps://cert.gov.ua/article/37714 | |
| 2115 | MD5 | c8bf238641621212901517570e96fae7 | (Go downloader) UAC-0056 group | hxxps://cert.gov.ua/article/37715 | |
| 2116 | MD5 | ca9290709843584aecbd6564fb978bd6 | (bait document) UAC-0056 group | hxxps://cert.gov.ua/article/37716 | |
| 2117 | MD5 | cf204319f7397a6a31ecf76c9531a549 | (bait document) UAC-0056 group | hxxps://cert.gov.ua/article/37717 | |
| 2118 | IPv4 | 45.84.0.116 | UAC-0056 group | hxxps://cert.gov.ua/article/37718 | |
| 2119 | URL | hxxp://45.84.0.116:443/c | UAC-0056 group | hxxps://cert.gov.ua/article/37719 | |
| 2120 | URL | hxxp://45.84.0.116:443/i | UAC-0056 group | hxxps://cert.gov.ua/article/37720 | |
| 2121 | URL | hxxp://45.84.0.116:443/m | UAC-0056 group | hxxps://cert.gov.ua/article/37721 | |
| 2122 | URL | hxxp://45.84.0.116:443/p | UAC-0056 group | hxxps://cert.gov.ua/article/37722 | |
| 2123 | URL | hxxps://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe | UAC-0056 group | hxxps://cert.gov.ua/article/37723 | |
| 2124 | URL | hxxps://forkscenter.fr/Sdghrt_umrj6/wisw.exe | UAC-0056 group | hxxps://cert.gov.ua/article/37724 | |
| 2125 | URL | hxxps://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/ | UAC-0056 group | hxxps://cert.gov.ua/article/37725 | |
| 2126 | URL | hxxps://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/ | UAC-0056 group | hxxps://cert.gov.ua/article/37726 | |
| 2127 | domain | forkscenter.fr | UAC-0056 group | hxxps://cert.gov.ua/article/37727 | |
| 2128 | domain | nirsoft.me | UAC-0056 group | hxxps://cert.gov.ua/article/37728 | |
| 2129 | Hostname | panelunregistertle-348[.]frge[.]io | FancyBear/APT28 | hxxps://urlscan.io/result/e9ee878a-46f6-4d46-85d1-2ee2596dedd8/#summary | |
| 2130 | SHA256 | a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea | CaddyWiper | hxxps://twitter.com/ESETresearch/status/1503436440398712832 | |
| 2131 | domain | dictionary-translator[.]eu | UAC-0056 group | hxxps://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software | |
| 2132 | IPv4 | 91.242.229[.]35 | UAC-0056 group | hxxps://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software | |
| 2133 | SHA1 | 3847ca79b3fd52b105c5e43b7fc080aac7c5d909 | UAC-0056 group | hxxps://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software | |
| 2134 | URL | hxxps://tinyurl[.]com/2p8kpb9v | UAC-0028 group | hxxps://cert.gov.ua/article/37788 | |
| 2135 | Hostname | panelunregistertle-348.frge[.]io | UAC-0028 group | hxxps://cert.gov.ua/article/37788 | |
| 2136 | Hostname | eo9p1d2bfmioiot.m.pipedream[.]net | UAC-0028 group | hxxps://cert.gov.ua/article/37788 | |
| 2137 | Hostname | eoiw8lhjwuc3sh2.m.pipedream[.]net | UAC-0028 group | hxxps://cert.gov.ua/article/37788 | |
| 2138 | MD5 | 00a54a6496734d87dab6685aa90588f8 | UAC-0020 group | hxxps://cert.gov.ua/article/37818 | |
| 2139 | MD5 | 1c2c41a5a5f89eccafea6e34183d5db9 | UAC-0020 group | hxxps://cert.gov.ua/article/37819 | |
| 2140 | MD5 | 32343f2a6b8ac9b6587e2e07989362ab | UAC-0020 group | hxxps://cert.gov.ua/article/37820 | |
| 2141 | MD5 | 3ed8263abe009c19c4af8706d52060f8 | UAC-0020 group | hxxps://cert.gov.ua/article/37821 | |
| 2142 | MD5 | 5db4313b8dbb9204f8f98f2c129fd734 | UAC-0020 group | hxxps://cert.gov.ua/article/37822 | |
| 2143 | MD5 | 67274bdd5c9537affbd51567f4ba8d5f | UAC-0020 group | hxxps://cert.gov.ua/article/37823 | |
| 2144 | MD5 | 75e1ce42e0892ed04a43e3b68afdbc07 | UAC-0020 group | hxxps://cert.gov.ua/article/37824 | |
| 2145 | MD5 | 993415425b61183dd3f900d9b81ac57f | UAC-0020 group | hxxps://cert.gov.ua/article/37825 | |
| 2146 | MD5 | adebdc32ef35209fb142d44050928083 | UAC-0020 group | hxxps://cert.gov.ua/article/37826 | |
| 2147 | MD5 | baf502b4b823b6806cc91e2c1dd07613 | UAC-0020 group | hxxps://cert.gov.ua/article/37827 | |
| 2148 | MD5 | d0632ef34514bbb0f675c59e6ecca717 | UAC-0020 group | hxxps://cert.gov.ua/article/37828 | |
| 2149 | MD5 | d34dbbd28775b2c3a0b55d86d418f293 | UAC-0020 group | hxxps://cert.gov.ua/article/37829 | |
| 2150 | MD5 | e08d7c4daa45beca5079870251e50236 | UAC-0020 group | hxxps://cert.gov.ua/article/37830 | |
| 2151 | MD5 | ecc7bb2e4672b958bd82fe9ec9cfab14 | UAC-0020 group | hxxps://cert.gov.ua/article/37831 | |
| 2152 | MD5 | f0197bbb56465b5e2f1f17876c0da5ba | UAC-0020 group | hxxps://cert.gov.ua/article/37832 | |
| 2153 | IPv4 | 176.119.2.212 | UAC-0020 group | hxxps://cert.gov.ua/article/37817 | |
| 2154 | IPv4 | 176.119.2.214 | UAC-0020 group | hxxps://cert.gov.ua/article/37833 | |
| 2155 | IPv4 | 176.119.5.194 | UAC-0020 group | hxxps://cert.gov.ua/article/37834 | |
| 2156 | IPv4 | 176.119.5.195 | UAC-0020 group | hxxps://cert.gov.ua/article/37835 | |
| 2157 | URL | http://176.119.2.212/web/t/data.out | UAC-0020 group | hxxps://cert.gov.ua/article/37836 | |
| 2158 | URL | http://176.119.5.195/k9otb49xq | UAC-0020 group | hxxps://cert.gov.ua/article/37816 | |
| 2159 | URL | http://getmod.host/DSGb3Y3X | UAC-0020 group | hxxps://cert.gov.ua/article/37837 | |
| 2160 | URL | http://getmod.host/OcthdaLm | UAC-0020 group | hxxps://cert.gov.ua/article/37838 | |
| 2161 | URL | http://getmod.host/ThlAHy3S | UAC-0020 group | hxxps://cert.gov.ua/article/37839 | |
| 2162 | URL | http://getmod.host/25s2mh | UAC-0020 group | hxxps://cert.gov.ua/article/37815 | |
| 2163 | domain | getmod.host | UAC-0020 group | hxxps://cert.gov.ua/article/37840 | |
| 2164 | domain | meteolink.host | UAC-0020 group | hxxps://cert.gov.ua/article/37841 | |
| 2165 | domain | netbin.host | UAC-0020 group | hxxps://cert.gov.ua/article/37842 | |
| 2166 | domain | stormpredictor.host | UAC-0020 group | hxxps://cert.gov.ua/article/37843 | |
| 2167 | domain | syncapp.host | UAC-0020 group | hxxps://cert.gov.ua/article/37844 | |
| 2168 | URL | hxxp://45.95.11.34:88/get.php | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2169 | FileHash-MD5 | 03f12262a2846ebbce989aca5cec74a7 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2170 | FileHash-MD5 | 5fb6202b8273a6a4cda73cee3f88ce1a | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2171 | FileHash-MD5 | 72ed59f0d293ceede46bd69a09322f30 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2172 | FileHash-MD5 | cd1a425e1ac6bc029fb4418523e43e88 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2173 | FileHash-MD5 | dfb5a03f56769e3d1195bdfe6bb62070 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2174 | FileHash-SHA256 | 090997b4691f1a155187a181dbf54aec034eafc7b9344016867fe50da15829df | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2175 | FileHash-SHA256 | 4df873ea077bdbfe5389d30b5b0d0ad4a3fa663af4a4109859b61eb7f6099fc8 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2176 | FileHash-SHA256 | 5e06d688ac955b351c3ced0083dc7e372e447458e6604fd82ac118a6ac8e553c | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2177 | FileHash-SHA256 | 6b721ab9f73718c393aca2b9ad06f45b09dbfb23d105ca5872d8df7515ae14c4 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2178 | FileHash-SHA256 | fd72080eca622fa3d9573b43c86a770f7467f3354225118ab2634383bd7b42eb | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2179 | IPv4 | 45.95.11.34 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2180 | URL | hxxp://45.95.11.34:3000/test | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2181 | URL | hxxp://45.95.11.34:88/_[A-Z0-9] | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2182 | URL | hxxp://45.95.11.34:88/get.php?a=We4Qu6 | UAC-0035 (InvisiMole) | hxxps://cert.gov.ua/article/37829 | |
| 2183 | FileHash-MD5 | 36dc2a5bab2665c88ce407d270954d04 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2184 | FileHash-MD5 | 7d20fa01a703afa8907e50417d27b0a4 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2185 | FileHash-MD5 | 989c5de8ce5ca07cc2903098031c7134 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2186 | FileHash-MD5 | b4f0ca61ab0c55a542f32bd4e66a7dc2 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2187 | FileHash-SHA256 | 30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2188 | FileHash-SHA256 | 3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2189 | FileHash-SHA256 | 8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2190 | FileHash-SHA256 | d897f07ae6f42de8f35e2b05f5ef5733d7ec599d5e786d3225e66ca605a48f53 | UAC-0088 DoubleZero | hxxps://cert.gov.ua/article/38088 | |
| 2191 | URL | hxxps://product2020.mrbasic.com:8080 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2192 | hostname | product2020.mrbasic[.]com | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2193 | FileHash-MD5 | 13612c99a38b2b07575688c9758b72cc | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2194 | FileHash-MD5 | 1aba36f72685c12e60fb0922b606417c | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2195 | FileHash-MD5 | 1af894a5f23713b557c23078809ed01c | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2196 | FileHash-MD5 | 3293ba0e2eaefbe5a7c3d26d0752326e | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2197 | FileHash-MD5 | 4fb630f9c5422271bdd4deb94a1e74f4 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2198 | FileHash-MD5 | 9c22548f843221cc35de96d475148ecf | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2199 | FileHash-SHA256 | 042271aadf2191749876fc99997d0e6bdd3b89159e7ab8cd11a9f13ae65fa6b1 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2200 | FileHash-SHA256 | 63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2201 | FileHash-SHA256 | 830c6ead1d972f0f41362f89a50f41d869e8c22ea95804003d2811c3a09c3160 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2202 | FileHash-SHA256 | 839e968aa5a6691929b4d65a539c2261f4ecd1c504a8ba52abbfbac0774d6fa3 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2203 | FileHash-SHA256 | a2ffd62a500abbd157e46f4caeb91217738297709362ca2c23b0c2d117c7df38 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2204 | FileHash-SHA256 | c0962437a293b1e1c2702b98d935e929456ab841193da8b257bd4ab891bf9f69 | UAC-0026 HeaderTip | hxxps://cert.gov.ua/article/38097 | |
| 2205 | URL | hxxp://ao3[.]hmgo[.]pw/tags/Akihabara@TODEEP/works | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2206 | URL | hxxp://ao3[.]hmgo[.]pw/tags/Akihabara@TODEEP/works/update | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2207 | URL | hxxp://ao3[.]hmgo[.]pw | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2208 | URL | hxxps://ao3[.]hmgo[.]pw | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2209 | FileHash-MD5 | 1365b82e7da0968e97c095d8bd9166dd | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2210 | FileHash-MD5 | 18e73cc3d5eda742530ba3fef59e3943 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2211 | FileHash-MD5 | 3303286735a07ae5d14db9c12843d44e | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2212 | FileHash-MD5 | 4a78df33d4f987103dc0c0f3a302b8cb | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2213 | FileHash-MD5 | b5525108912ee8d5f1519f1b552723e8 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2214 | FileHash-MD5 | b724ff750dff495e6634ddf0f1263844 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2215 | FileHash-MD5 | bcdab4ae622811f699765bfb9cb909d2 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2216 | FileHash-MD5 | e4b54ee2f0068762179e7e514d90bf16 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2217 | FileHash-SHA256 | 37e644deee0add76bac9c5121355a03a459b1a97917383765bf3df94e9af7e29 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2218 | FileHash-SHA256 | 59ed536e1955e310f321435d43ca8b60cb3746514f3c3ea951d43633cacbe7bc | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2219 | FileHash-SHA256 | 6149680c8541980d46c17681e37e4751e2baca1d13ee648b8188dfb24bf56f7c | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2220 | FileHash-SHA256 | 7cf3f758b2abb303dec89736dfd55c38309a21aec2d83d3d4e590f9538fc5f15 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2221 | FileHash-SHA256 | c14fce93183dc4173be02b2a48d1ed06b43656c7b6d5a290d9948b6947df9033 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2222 | FileHash-SHA256 | d324d7f30984931176ff878a81c7c1f4f979ad3d759c7f33427bba10d9deb1f6 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2223 | FileHash-SHA256 | f98e1e61c84a5ed098e7481ab339e2881195f4d1b101c92b81113eb7ff56e63d | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2224 | FileHash-SHA256 | fbabc4e5a6470606fc64c39c182b5a7a71f8fa96f50c67725d52abf184f75fd4 | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2225 | domain | dhdhk0k34[.]com | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2226 | domain | hmgo[.]pw | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 | |
| 2227 | hostname | ao3[.]hmgo[.]pw | UAC-0051 (UNC1151) | hxxps://cert.gov.ua/article/38155 |