Skip to content

Instantly share code, notes, and snippets.

@kirk-sayre-work
Last active August 11, 2023 20:04
Show Gist options
  • Save kirk-sayre-work/48a31b90e830a57adf5f3cf3726fe0d2 to your computer and use it in GitHub Desktop.
Save kirk-sayre-work/48a31b90e830a57adf5f3cf3726fe0d2 to your computer and use it in GitHub Desktop.
DarkGate VBS IOCs 8/11/2023
2nd Stage URLs:
http://149.248.0.82:2351/msiaybguqux
http://149.248.0.82:2351/msihlxovvqy
http://149.248.0.82:2351/msikywiobng
http://149.248.0.82:2351/msivwrwqepo
http://149.248.0.82:2351/msilrqozizy
http://45.89.65.198:80/msidkbkejlq
http://45.89.65.198:80/msilrajnmvn
http://reactervnamnat.com:80/msicvmskumh
http://reactervnamnat.com:80/msimqrqcjpz
http://reactervnamnat.com:80/msixrtxvifv
http://wmnwserviceadsmark.com:80/msiccoakvdg
http://wmnwserviceadsmark.com:80/msijguavgpg
VBS Sample Hashes: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 up for free to join this conversation on GitHub. Already have an account? Sign in to comment