SHA-256


---------------------------------------------

dopper (Safib Assistant RAT)
646b4d9f624018421a34cd1bfbea6d05f7e8edfa2fe53c685a12db4b523fee7a
c6c83dd920e718e710026a2e495d630b034210ee68279b9a6b29da06c5e8c2dd
443c9626400e3ffe8ac0be31a39618c80aec5a8da38c27ebab36984efe0b76df
4394f65f47ac54fc77bb1694910f7de2d9cb5c4a5078c89de97cffeb3787e699
8e846b9e5a96d548d83a4f91028bb05f85f16de0a93571b7e031cd972c7c5500

quartz.dll (Safib Assistant RAT`)
9aff582c27ea70eafebf3012cd181902b380b7de53b69da89149cd21ef2e5697
f69444522eec9fb4d6b4e021036b2d2dd7232453369bff3d60cee5a11efdd451
e93d9c6e6f63ee5c87acde68d94087428a6a73c4cd184ff610989a9f025feb83
0e2c211e4e6c48827eaf2ff614187c737b311e226960692e5ab9d16d939d7bab
de39e86626922c6ede00988f92d3420c3b8e05f660b259df8d1812d8f2fdac34

dropper (Teamviewer RAT)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avicap32.dll (Teamviewer RAT)
e37e13f3b4074bf02e7d19f74bd6d3ff4f3d690e2ee8beec3c75c95634434e3b
8173e1d3c3ac431d07fa7795dabaf3e89ffc69b79992f3399ceda57526183be7
a2768b2c6fda3e27725503b20bce1e26f64108e743ea705eb0cc401eb848f42d
afd1e1655be0131ecc3dc68f8c4fd4e795a7a4d13f506c70105c486073d6745f
80910b9438d178bc1c9f751798a27163b73b907314f88139c432d520feed1c01
108bac9119b630bf7188a6b409ea667a581b357f0b5b0440b3e3173d43efd1fa
51f17dea64515d5a3a1a6b070fa9c5abb08c028ad9d116a49d796e354fcd68d3
2572e3a7673b7c3e8d0f9569fb42a4946ddd0e9ac8bdaaf29aebee9dd47c8194
108bac9119b630bf7188a6b409ea667a581b357f0b5b0440b3e3173d43efd1fa
2572e3a7673b7c3e8d0f9569fb42a4946ddd0e9ac8bdaaf29aebee9dd47c8194

clipper (clipboard replacer)
4d59e857c6923b6ead19109dbf591bbe93f3407153c992ad35fc6ed8969a34c3

Redline Stealer
375793b022141ba589325c050476f578f0602d9b244a941d98ec5eff7d6ec77e
2f1978e555a8b49775a6b7e0fd959bd2ee10f35f15f1f1f4a051c9d8ebd320fa
38a5b96fd07f03041f6eff913b85fc621fa314e1de87326accb00ee218c37756
ea44a8e50967e1680a28612762edc5ce39f178690d74cf75b7cec38401db48f0
094108df2b18400b628f725e50e0073676776a31ae271737405c39741d831e9f


URL


---------------------------------------------

delivery domains
evvresponsefund.com
allincalisthenics.com
faraipyro.com
erin-nathaniel.com
bummerpost.com
neponsetflagfootballleague.com
estateplanningcentral.com
optimalfatmetabolism.com
toa-ara.com
nathanfraser.com
deiflo.com
allincalisthenics.com
nationalinsuranceappraisersregistry.com


C&C servers

bingoroll20.net
bingoroll21.net
bingoroll22.net
bingoroll23.net