IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

Return of the Evilnum APT with updated TTPs and new targets

DATE : 2022-06-16T07:00:00
SOURCE : zscaler.com

FILE_HASH_MD5:
0b4f0ead0482582f7a98362dbf18c219
4406d7271b00328218723b0a89fb953b
61776b209b01d62565e148585fda1954
6d329140fb53a3078666e17c249ce112
db0866289dfded1174941880af94296f
f0d3cff26b419aff4acfede637f6d3a2
79157a3117b8d64571f60fe62c19bf17
63090a9d67ce9534126cfa70716d735f
f5f9ba063e3fee25e0a298c0e108e2d4
ea71fcc615025214b2893610cfab19e9
51425c9bbb9ff872db45b2c1c3ca0854

Domain:
travinfor.com
webinfors.com
khnga.com
netwebsoc.com
infcloudnet.com
bgamifieder.com
bunflun.com
refinance-ltd.com
book-advp.com
mailservice-ns.com
advertbart.com
inetp-service.com
yomangaw.com
covdd.org
visitaustriaislands.com
traveladvnow.com
tripadvit.com
moreofestonia.com
moretraveladv.com
estoniaforall.com
bookingitnow.org
travelbooknow.org
bookaustriavisit.com
windnetap.com
roblexmeet.com
netrcmapi.com
meetomoves.com
bingapianalytics.com
azuredcloud.com
appdllsvc.com
udporm.com
pcamanalytics.com
nortonalytics.com
deltacldll.com
mscloudin.com
msdllopt.com