mirror of
https://github.com/Gi7w0rm/MalwareConfigLists
synced 2024-06-20 14:08:58 +00:00
68 lines
3.2 KiB
Plaintext
68 lines
3.2 KiB
Plaintext
###################################################################################################
|
|
SmokeLoader C2 URLs:
|
|
http://wa5zu7sekai8xeih.com/
|
|
http://potunulit.org/
|
|
http://yic0oosaeiy7ahng.com/
|
|
http://aek0aicifaloh1yo.com/
|
|
http://hie7doodohpae4na.com/
|
|
http://host-file-host6.com/
|
|
http://hoh0aeghwugh2gie.com/
|
|
http://aapu.at/tmp/
|
|
http://kingpirate.ru/tmp/
|
|
|
|
###################################################################################################
|
|
SmokeLoader additional distribution:
|
|
http://respekt5569.com/downloads/toolspub1.exe
|
|
http://hugersi.com/dl/6523.exe
|
|
https://leaderspro.ps/tmp/index.php
|
|
|
|
###################################################################################################
|
|
Payloads:
|
|
https://radiobridge-egy.com/tmp/index.php -> Bootkit: https://tria.ge/230427-wp1xfaha86
|
|
|
|
https://github.com/HiddenEyeZ/tg/raw/main/Mjmbjbvye.exe -> Loader with Telegram C2: https://api.telegram.org/bot5726741061:AAElVs4Kh5cFjADvNi4pSC5O6l_EdthxhCY/sendMessage?chat_id=5701072641 -> RedLine (C2: 5.75.134.144:7985 )
|
|
|
|
https://transfer.sh/get/IeMHv4/open.exe -> Raccoonv2 / RecordBreaker C2: http://85.192.63.15/
|
|
|
|
https://transfer.sh/get/UXwIbr/5.exe -> RedLine Stealer (BotNet:Installs3000_20230424 ) -> C2: 149.100.138.146:80 + 154.49.136.127:80
|
|
|
|
https://transfer.sh/get/VVjGiQ/Hknmozjx.exe -> Unknown Loader/Stealer? -> C2: 87.121.221.84:44810 -> https://github.com/test93872/demo5/raw/main/plugin_4.dll -> XMRig
|
|
|
|
http://193.142.59.113/forum/img/130.exe -> RedLine (Botnet: 1379752987) -> C2: 167.235.158.92:13190
|
|
|
|
https://transfer.sh/get/d5VDLG/Novaa.exe -> Themida packed RedLine -> C2: 195.201.245.238:6695
|
|
|
|
http://146.19.173.221/file24si.exe -> RedLine -> C2: 176.124.192.196:80 (url: janjackfrs.com)
|
|
|
|
https://transfer.sh/get/8CIWav/123.exe -> RedLine -> C2: 195.201.245.238:6695
|
|
|
|
https://transfer.sh/DYkXJz/ole.exe -> RedLine -> C2: 176.123.9.85:16482
|
|
|
|
https://transfer.sh/get/DlCQPI/423243.exe -> https://transfer.sh/get/SatXF5/Hkthmahafsn.dat -> RedLine (Botnet: richdazbot) -> C2: 45.77.166.103:37904 + RedLine -> C2: 195.201.245.238:6695
|
|
|
|
|
|
|
|
###################################################################################################
|
|
Payloads (down/not executed)
|
|
https://transfer.sh/get/5IQwbm/stcr.exe -> Not Found
|
|
|
|
|
|
|
|
###################################################################################################
|
|
Old Payloads:
|
|
https://github.com/Abraham3210/bitcoin/releases/download/New/2-1_2023-04-14_08-31.exe
|
|
https://cdn.discordapp.com/attachments/1091449028107051142/1094520407274569738/bildak.exe
|
|
https://cdn.discordapp.com/attachments/848958130402361345/1099311683115167754/WhiteCrypt_2.exe
|
|
https://cdn.discordapp.com/attachments/1069223617117814787/1069223713129635970/asdasdb.exe
|
|
http://colisumy.com/dl/buildz.exe
|
|
https://www.jani.hu/upload/files/cheese_sDu.bat
|
|
https://cdn.discordapp.com/attachments/1082332577060356128/1087147141560012851/635965506.exe?raw
|
|
https://store1.gofile.io/download/02e69779-8bda-4464-9669-05fb0e8f9ae7/74.0.3729.108_chrome_installer.exe
|
|
http://212.113.119.255/file/lega.exe
|
|
http://5.252.118.57/s.exe
|
|
http://193.233.134.117/shared/Ruzvelt.exe
|
|
https://cdn.discordapp.com/attachments/920726397322928168/1079835676448669768/qwfqwf.exe
|
|
https://nftsmean.com/pro2.exe
|
|
http://45.9.74.80/power.exe
|
|
|