-
Notifications
You must be signed in to change notification settings - Fork 0
/
WikiLoader_30.04.2024.txt
47 lines (30 loc) · 2.18 KB
/
WikiLoader_30.04.2024.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
30.04.2024 | WikiLoader | TA544 |
*************************************************
.url https://letjsnod.com/Asafety?ab05886c110c4143995a&master=fRglK&fiBr=184b095321767d0[…]-15d46e4d953bf9a934ff70&ui=3b4914a5733d69134e931c0aab559944d3b
.pdf 8b599b39bc3706664d39250a571b7e6536f2f6fddf71e26b5755c71ec4447238 ( Attachment_1337-001.pdf )
.zip dc9cee254e4d2ffd41d4fa4519ac0dea5ff194d8e328550c2a4f22a569286dcb
.js 702d6957bfbd9f13cb0a4d3523907ea61a5b81867faf9dedb4cad5fca9563e94
.zip 99fe6730862db95a23d5996996d99d55a809390b152bfdc15d617545016cbbe6
.dll f1a49cea454bac3e78ac765b247b65d00c896d84de2028892b00d4310453c665
*************************************************
pdf > url > .js > js > .exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Invoice-939713625-008-5283127-8901604.js
wscript.exe C:\Users\Admin\AppData\Local\Temp\sso.js
Explorer.EXE
C:\Users\Admin\AppData\Local\Temp\4_npp.8.6.3.portable.x64.zip\notepad.exe
explorer.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
*************************************************
distro urls:
https://letjsnod.com/Asafety?ab05886c110c4143995a&master=fRglK&fiBr=184b095321767d0[…]-15d46e4d953bf9a934ff70&ui=3b4914a5733d69134e931c0aab559944d3b
https://letjsnod.com/ssoservice?LSY=BMOSou&oD=AHnwvHg&sourceYgi=eilvX&Kacontent=sMIOOkEIJS&w_cid=9367983&rE=9592978
https://cdn.discordapp.com/attachments/1063894486901587979/1234858480226144296/1_npp.8.6.3.portable.x64.zip?ex=66324314&is=6630f194&hm=4a3e64dc2428f0b2ce8dbc485cbea06fb7e42d700175fe320a996a451c76a128&
*************************************************
c2's
https://barliam.com/ph/wp-content/themes/twentytwentythree/plxka3.php?id=1
https://dorseydorse.com/wp-content/themes/twentytwenty/i4imyy.php?id=1
https://polarishousingsystems.com/wp-content/themes/twentytwentyfour/qshgfl.php?id=1
https://rariate.com/ph/wp-content/themes/twentytwentythree/6rndt2.php?id=1
https://unokodkelas.cl/wp-content/themes/twentytwenty/pttfrp.php?id=1
https://www.judicialconsulting.es/wp-content/themes/hello-elementor/t745ny.php?id=1
*************************************************