Skip to content

Instantly share code, notes, and snippets.

@pinksawtooth

pinksawtooth/nao_sec-170712_Malware dropped by RIG(2017 May-June).md

Last active July 31, 2017 10:24
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save pinksawtooth/acd784609eb960a7c57425fbf5e2b8e4 to your computer and use it in GitHub Desktop.
Save pinksawtooth/acd784609eb960a7c57425fbf5e2b8e4 to your computer and use it in GitHub Desktop.
Download ZIP
nao_sec-170712_Malware dropped by RIG(2017 May-June)
Raw
nao_sec-170712_Malware dropped by RIG(2017 May-June).md

DecimalIP

Date Hash Family
5/1 0f391cb9897dfd4ad91c66a7b17f28df8c82d8ece937a411394a7bee27a6e330 SmokeLoader
5/2 b1ac30b73b959603bb2c42f97bab6ca48f5a953a1fcb50bacb06f0eb5e2402c7 SmokeLoader
5/7 0aea25457447b35ef7bb9baa849be1a2c5a06f926d4387d9540040f34cc25851 SmokeLoader
5/8 0fd66826ca59b33c8f9d116c97a80e632cf87821fba6e9a3ea10321e757e41c2 SmokeLoader
5/10 0fd66826ca59b33c8f9d116c97a80e632cf87821fba6e9a3ea10321e757e41c2 SmokeLoader

EITest

Date Hash Family
5/24 9e32f6654a122fbceef5d1b0bd6d781fb364b74aedce94fea8e7969836bcf4f7 MOLE
5/26 acc5281776d352aaa491fc431d715d770afdd2e549169ca8031210a0dcdf9323 BitCoinMiner
79edfa7bbd4b3aadf50c086f1c2d1f67934832b0b9cbf7626675d53c2e15bc39 BitCoinMiner

Seamless

Date Hash Family
5/15 ba033d947631f58e0400a8066918db0f6f799dffd52f06c3a1288554b3e00656 Ramnit
5/18 71b2e0c08768099d9b840905cbdfa1b88c86779cb02532c3fdf1e20637871363 Ramnit
5/19 bc2d9996d2c589b9c1841026b0e5904dd5ec48719fca5ca1b27e2dd559fc68ca Ramnit
5/27 2ebb8139842a0ffd04ac249f80a3d7562783393606c337b391dc270f0e3ee588 Ramnit
5/30 befc125c3c8891ee220236b5fa31034bf67f448f4eee3ecf15165d5d2ef3327a Ramnit
0f3be4761a8d4df570b6777d456b63b7c9965dddccac26cb2d9756779ae3ac95 Ramnit
5/31 ed7852049b9f5af6497c0f9dc155b4f7087d8c4f5b19ae82a728803f27671dbe Ramnit
6/2 1de7c332a9aee2cab5c0690d4d8e59b19d89bcc734eb79bbd4e7310fb7220e8e Ramnit
9705e8859a0b9e3bbacb4b71c4fd7e972715278c4d82075ab60c51ff47d5fc27 Ramnit
6/3 ee678a7ce94022c204cc5e60918b64ab011df501474dc1df39335eaa3237eeae Ramnit
6/5 6a1fc689d2ef32ee6288498f8a875c6dc880d7494f46c05d25d0e1f627984e8e Ramnit
6/8 b46c893c4dc4678bfbcf6c5c0036ce5c7be321c3f373f1b9e2f348c1a4dab1f9 Ramnit
a9f64f24ce7ab4d0a25f888b4bfa12fa5f30be9be2c81602cec262257e3db0ef Ramnit
6/9 04dd14c092ecdc9c5dac82b806824fa7d00c26c3cc0e2c5cbe62198bf67b4be8 Ramnit
6/26 3db2116307d4cf17b0eabe601654faa2228540498b8097b36f8e3b8e0a2fbecf Ramnit
6/27 0e41dc3e8793bef275ff753501e55dbaa5737b06dc8427d24dd01a9fe67234b6 Ramnit
c9f96c95007f4bd936ea882bc8d15a4b035e3b9d6838f55b2be33d9cba75f793 Ramnit
6/28 174fcd0f0cda19f392c2bb54af493230df2adc271a1f71fcbbd0e99b7c146b7e Ramnit?
6/29 2b775281488eb7249e6a1f348c863a7c21870fdfd0900e312afa0ef6046edc84 Ramnit
6/30 36425647f1e2cfda2c9e5a82091361ddf814c42e060818af9a5d65f86d56e81d Ramnit

Malvertising

Date Hash Family
6/12 988a1a6df329c4034a828af781c7705d57040f324f653112f589bb36c63fffd5 Chthonic
0c5446a511b349773e1031b88cd4fd997cd98b686a4cd4ca5dc16b386961e2c5 Chthonic
fbbb4058d6d553341945c755ec9f70b1a7bb8599f95519ee0a6703d407cb7e78 Chthonic
6/13 57b47a54c9e2115f6de0979de9561956fa61f8420dace40985754a4af3892465 Chthonic

RoughTed

Date Hash Family
6/21 e7049140f7f07a48406a7de2e3a08fc8759af9f94de533210e99f69c34bc27aa Bunitu

JS Redirector

Date Hash Family
6/27 7784147615af8184a36778d9ab77c6e7880abb4cc3637eaf25286bfbdc6bfe92 Ursnif
6/28 94a0a09ee6a21526ac34d41eabf4ba603e9a30c26e6a1dc072ff45749dfb1fe1 Cutwail botnet
6/30 a86e9315d8716667098515716ad24a1468d3173b0a4a4e92402d9e5b0d68ccec Cutwail botnet
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment