Indicators of Compromise

portscan.txt

NETSTAT.EXE

nbtscan.exe

http://github.com/chainreactors/gogo/releases/download/v2.14.0/gogo_windows_amd64.exe

ROUTE.EXE

Win.Loader.Agent

Win.Tool.gogo

Win.Malware.Stowaway

Win.Tool.dddd

adconnectdump.py

result.dat

test.ini

wagent.exe

Win.Loader.CloudSorcerer

run.bat

Win.Malware.Agent

Win.Malware.Netdraft

Win.Malware.Snappybee

www.drivelivelime.com

UAT-8302 and its box full of malware

msiidentity.com

UAT-8302 and its box full of malware

trafficmanagerupdate.com

UAT-8302 and its box full of malware

51f0cf80a56f322892eed3b9f5ecae45f1431323600edbaea5cd1f28b437f6f2

UAT-8302 and its box full of malware

7c593ca40725765a0747cc3100b43a29b88ad1708ef77e915ab02686c0153001

UAT-8302 and its box full of malware

7d9c70fc36143eb33583c30430dcb40cf9d306067594cc30ffd113063acd6292

UAT-8302 and its box full of malware

9f115e9b32111e4dc29343a2671ab10a2b38448657b24107766dc14ce528fceb

UAT-8302 and its box full of malware

b19bfca2fc3fdabf0d0551c2e66be895e49f92aedac56654b1b0f51ec66e7404

UAT-8302 and its box full of malware

e74098b17d5d95e0014cf9c7f41f2a4e4be8baefc2b0eb42d39ae05a95b08ea5

UAT-8302 and its box full of malware

ee56c49f42522637f401d15ac2a2b6f3423bfb2d5d37d071f0172ce9dc688d4b

UAT-8302 and its box full of malware

f859a67ceebc52f0770a222b85a5002195089ee442eac4bea761c29be994e2ea

UAT-8302 and its box full of malware

45.135.135.100

UAT-8302 and its box full of malware

85.209.156.3

UAT-8302 and its box full of malware

88.151.195.133

UAT-8302 and its box full of malware

http://msiidentity.com/pw

UAT-8302 and its box full of malware

http://www.drivelivelime.com/pw

UAT-8302 and its box full of malware

http://trafficmanagerupdate.com/index.php

UAT-8302 and its box full of malware

http://www.drivelivelime.com/x

UAT-8302 and its box full of malware

45cd169bf9cd7298d972425ad0d4e98512f29de4560a155101ab7427e4f4123f

UAT-8302 and its box full of malware

1bb59491f7289b94ab0130d7065d74d2459a802a7550ebf8cd0828f0a09c4d38

UAT-8302 and its box full of malware

2b627f6afe1364a7d0d832ccba87ef33a8a39f30a70a5f395e2a3cb0e2161cb3

UAT-8302 and its box full of malware

343105919aa6df8a75ecb8b06b74f23a7d3e221fca56c67b728c50ea141314bc

UAT-8302 and its box full of malware

35b2a5260b21ddb145486771ec2b1e4dc1f5b7f2275309e139e4abc1da0c614b

UAT-8302 and its box full of malware

111e8abb4b8592172d597926f47f018c

UAT-8302 and its box full of malware

4109f15056414f25140c7027092953264944664480dd53f086acb8e07d9fccab

UAT-8302 and its box full of malware

3dec6703b2cbc6157eb67e80061d27f9190c8301c9dd60eb0be1e8b096482d7e

UAT-8302 and its box full of malware

45.140.168.62

UAT-8302 and its box full of malware

071e662fc5bc0e54bcfd49493467062570d0307dc46f0fb51a68239d281427c6

UAT-8302 and its box full of malware

843f8aea7842126e906cadbad8d81fa456c184fb5372c6946978a4fe115edb1c

UAT-8302 and its box full of malware

185.238.189.41

UAT-8302 and its box full of malware

4c71357de3c0b12094693ca6eff94cad

UAT-8302 and its box full of malware

c46bac27b5ca151afabd22c5546f78ae2ae3a20d

UAT-8302 and its box full of malware