Indicators of Compromise

System.Runtime.InteropServices.HandleRef

Microsoft.Win32.UnsafeNativeMethods

System.dll

Location.Split

System.Reflection.Emit.AssemblyBuilderAccess

CurrentDomain.GetAssemblies

vy9.CreateType

vy9.DefineMethod

System.Reflection.CallingConventions

vy9.DefineConstructor

System.MulticastDelegate

ow7.Length

Net.Webclient

enc.GetString

loader.Length

out.append

ry6.Length

ry6.Substring

CurrentDomain.DefineDynamicAssembly

System.Reflection.AssemblyName

http://klikbets.net/admin/client.php

http://totallyhealth-wealth.com/downld-id_mwGdczs

Variant.Ulise

http://adsinfocoast.com/admin5/client.php

http://secureinternet20.com/admin5/client.php

http://widestaticsinfo.com/admin4/client.php

http://barrel1999.com/admin4/client.php

http://towncentrehotels.com/ps1.dat

http://lasartoria.net/admin/client.php

http://clanvisits.com/mini.dat

http://p-leh.com/update_java.dat