Indicators of Compromise

github.rs

npm.rs

users.rs

http://mail.maincdn.biz/s1/p11.db

http://mail.maincdn.biz/info/changelog.txt

http://mail.maincdn.biz/s1/v111.xls

http://address-in.kz/client/changelog.txt

http://mail.webmaster-1.kz/include/changelog.txt

http://getupdates.kz/ch582/changelog.txt

2d23b519931072632b8b6c0c9560d95414dd1639df895694dff7e5ea19fe5182

25c46c068dbee7bd77cf762ed140c80ddaf439d118f51080e92478f982848a30

52d69c91fba8435398870d480f37e87f0a9f7ee721473c98659f5b94b1c91abb

ff94ded03a42857c7c534229859b99e034745177184791df3084b6dde66b29e6

0a424531b7c46a72a6f1e2b5a0449b487d30b2f5389a2b86720e278f07ae976b

4e73334972d6b01650c572fd58596479e68edeb8337962a19e0a76579a9b4ecc

81c400f0345b5b84fc484b4446b1b7fec5598083056c8012a308f8d38d44667e

727e28c21462cdd3f28991305d16063c871c64674edae061f95e16c9f474fe13

cb7f5dd7b0d6465a2d0b83042154f4329f6b7b2727c5ed17b95d777e43f437e1

s.js.bc.ak.sggs.ksv@gmail.com

cc452646fd25653738be3ec264b55598d681838a2ceaa2208bdae0506587a183

CMakeLists.txt

fluffypancakes.dev

http://wecloud.biz/m11.xls

http://wecloud.biz/mail/ajax.php

http://wecloud.biz/mail/changelog.txt

newvirus@kaspersky.com

207.90.194.2

m11.xls

todlfavo4lhvwgvuy6akeutlawypmdf6wkwpdxq74rncy26rsx7sivid.onion

settings.json

Backdoor.Win32.Mokes

pyproject.toml

build.rs

scroBj.dll