PULSE NAME
IOCs - Ursnif/Gozi - @JAMESWT_MHT - 1/23/23
WHITE Techronik 2023-01-23 Modified: 2023-01-23
72
IOCs
HIGH VOLUME
https://twitter.com/JAMESWT_MHT/status/1617474664728592384 URLhaus - https://urlhaus.abuse.ch/browse/tag/agenziaentrate/
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
ursnif Gozi
Indicators of Compromise (72)
All URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://agenziaonline.top/index.php 2023-01-23
URL http://akeadparis.com/agenzia/azienda/verificare.zip 2023-01-23
URL http://blogslinks.top/readme.txt 2023-01-23
URL http://dexpertspro.com/headers/azienda/avviso.zip 2023-01-23
URL http://dominikania.com 2023-01-23
URL http://dominikania.com/ 2023-01-23
URL http://easytotorial.com 2023-01-23
URL http://easytotorial.com/ 2023-01-23
URL http://fierstar.com 2023-01-23
URL http://fierstar.com/ 2023-01-23
URL http://fortdelgres.com/headers/online/index.php 2023-01-23
URL http://fortihook.com 2023-01-23
URL http://fortihook.com/ 2023-01-23
URL http://ginoscratch.com/agenzia/azienda/modulo.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/Agenzia.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/AgenziaEntrate.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/Agenzia_Entrate.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/agenzia_delle_entrate.z... 2023-01-23
URL http://inthbc.com/agenzia/azienda/avviso.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/contabilita.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/contratto.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/documento.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/modulo.zip 2023-01-23
URL http://inthbc.com/agenzia/azienda/verificare.zip 2023-01-23
URL http://kiengiang24h.com/agenzia/azienda/contabilita.zip 2023-01-23
URL http://kitdigital.tecoinfor.com/agenzia/azienda/modulo.zi... 2023-01-23
URL http://lanrungnamtau.com/agenzia/azienda/Agenzia_Entrate.... 2023-01-23
URL http://premiumlist.top/image.txt 2023-01-23
URL http://recuperandotuamor.com/imprendit.php 2023-01-23
URL http://wynecare.com/static/azienda/contabilita.zip 2023-01-23
URL http://zopxor.com 2023-01-23
URL http://zopxor.com/ 2023-01-23
URL https://blogslink.top/readme.txt 2023-01-23
URL https://blogslinks.top/readme.txt 2023-01-23
URL https://dominikania.com 2023-01-23
URL https://dominikania.com/ 2023-01-23
URL https://easytotorial.com 2023-01-23
URL https://easytotorial.com/ 2023-01-23
URL https://enmillenium.com/agenzia/azienda/contratto.zip 2023-01-23
URL https://fierstar.com 2023-01-23
URL https://fierstar.com/ 2023-01-23
URL https://fortihook.com 2023-01-23
URL https://fortihook.com/ 2023-01-23
URL https://onlinerlink.top/index.php 2023-01-23
URL https://premiumlist.top/image.txt 2023-01-23
URL https://securezzalines.top/image.txt 2023-01-23
URL https://www.lasikofmichigan.com/wp-content/themes/azienda... 2023-01-23
URL https://zopxor.com 2023-01-23
URL https://zopxor.com/ 2023-01-23
domain agenziaonline.top 2023-01-23
domain akeadparis.com 2023-01-23
domain blogslink.top 2023-01-23
domain blogslinks.top 2023-01-23
domain dexpertspro.com 2023-01-23
domain dominikania.com 2023-01-23
domain easytotorial.com 2023-01-23
domain enmillenium.com 2023-01-23
domain fierstar.com 2023-01-23
domain fortdelgres.com 2023-01-23
domain fortihook.com 2023-01-23
domain ginoscratch.com 2023-01-23
domain inthbc.com 2023-01-23
domain kiengiang24h.com 2023-01-23
domain lanrungnamtau.com 2023-01-23
domain onlinerlink.top 2023-01-23
domain premiumlist.top 2023-01-23
domain recuperandotuamor.com 2023-01-23
domain securezzalines.top 2023-01-23
domain wynecare.com 2023-01-23
domain zopxor.com 2023-01-23
hostname kitdigital.tecoinfor.com 2023-01-23
hostname www.lasikofmichigan.com 2023-01-23