Comments

Software License malspam delivers Locky — 1 Comment

  1. > http://pastebin.com/cCeYpZsd
    … C2:
    POST http ://185.46.11.236 / checkupdate
    POST http ://91.200.14.109 / checkupdate
    POST http ://93.170.104.23 /checkupdate
    POST http ://95.213.224.117 /checkupdate

    185.46.11.236: https://www.virustotal.com/en/ip-address/185.46.11.236/information/ – RU
    91.200.14.109: https://www.virustotal.com/en/ip-address/91.200.14.109/information/ – UA
    93.170.104.23: https://www.virustotal.com/en/ip-address/93.170.104.23/information/ – NL
    95.213.224.117: https://www.virustotal.com/en/ip-address/95.213.224.117/information/ – RU

    //

Leave a Reply

Your email address will not be published. Required fields are marked *