Indicators of Compromise

pgw-s5s8.mpgw001.node

osmocom.org

172.104.129.0

172.104.236.0

proxychains4.local1084.conf

78c579319734a81c0e6d08f1b9ac59366229f1256a0b0d5661763f6931c3b63c

b06f52e2179ec9334f8a3fe915d263180e538f7a2a5cb6ad8d60f045789123b6

45.76.215.0

167.179.91.0

207.148.24.0

45.33.77.0

139.162.156.0

45.32.116.0

172.104.79.0

ad9fef1b86b57a504cfa1cfbda2e2ac509750035bff54e1ca06f7ff311d94689

bf5806cebc5d1a042f87abadf686fb623613ed33591df1a944b5e7879fb189c8

9973edfef797db84cd17300b53a7a35d1207d166af9752b3f35c72b4df9a98bc

4668561d60daeb7a4a50a9c3e210a4343f92cadbf2d52caab5684440da6bf562

65143ccb5a955a22d6004033d073ecb49eba9227237a46929495246e36eff8e1

16294086be1cc853f75e864a405f31e2da621cb9d6a59f2a71a2fca4e268b6c2

frpc.iniN

cord.lib

6d3759b3621f3e4791ebcd28e6ea60ce7e64468df24cf6fddf8efb544ab5aec0

c5ddd616e127df91418aeaa595ac7cd266ffc99b2683332e0f112043796ede1d

4480b58979cc913c27673b2f681335deb1627e9ba95073a941f4cd6d6bcd6181

dbus.log

bitsadmin.exe

certutil.exe

wmic.exe

httpd.conf

installnow.sh

packet.pcap

97d4c9b5750d614face73d11ba8532e53594332af53f4c07c1543195225b76eb

proxychains.conf

libcord.so