InfrastructureandSamplesofHamas'AndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf

Report name	Domains	Hosts	Samples
InfrastructureandSamplesofHamas'AndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf (Click name to open as page)	updatemobapp.website www.idf.il project.org mobilestoreupdate.website glancelove.com clearskysec.com www.clearskysec.com www.ci autoandroidup.website goldncup.com www.haaretz.com anew.football.cup.world.com	N/A	8f1b709ae4fb41b32674ca8c41bfcbf7 95a782bd8711ac14ad76b068767515d7 4f9383ae4d0285aeb86e56797f3193f7 5b2aac6372dea167c737b0036e1bd515 b3e40659ae0a0852e2f6eb928d402d9d 7a9503152b4c8c1ee80ac7daf5405a91

NewinvestigationsintotheCCleanerincidentpointtoapossiblethirdstagethathadkeyloggercapacities.pdf

Report name	Domains	Hosts	Samples
NewinvestigationsintotheCCleanerincidentpointtoapossiblethirdstagethathadkeyloggercapacities.pdf (Click name to open as page)	blog.avast.com avast.com	N/A	N/A

APT37_Final1stspyReapingtheFreeMilk-Intezer.pdf

Report name	Domains	Hosts	Samples
APT37_Final1stspyReapingtheFreeMilk-Intezer.pdf (Click name to open as page)	www.intezer.com	N/A	fb94a5e30de7afd1d9072ccedd90a249374f687f16170e1986d6fd43c143fb3a 9c52cef8d1e5e5f8245860c205364138f82c54df

WateringHoleAttackonLeadingHongKongTelecomSiteExploitingFlashFlawCVE-2018-4878_Morphisec.pdf

Report name	Domains	Hosts	Samples
WateringHoleAttackonLeadingHongKongTelecomSiteExploitingFlashFlawCVE-2018-4878_Morphisec.pdf (Click name to open as page)	li715-241.members.linode.com	N/A	58d15b7a49193022d8fb9712fac1a9e2

APT-C-23IOCs_0-symantec.pdf

Report name	Domains	Hosts	Samples
APT-C-23IOCs_0-symantec.pdf (Click name to open as page)	so-chat.org mail-presidency.com fasebock.info new.filetea.me ragnar-lothbrok.info fasebcck.com oriential.website dachfunny.club accuant-googlc.com rexkatsugeki.info victor-stewart.info alisonparker.club kik-com.com hitmesanjjoy.pro zachlieberman.club assets-acc.club leonard-kim.website pmi-pna.com max-eleanor.info caroline-nina.com android-settings.info hotmailme.website john-brown.website useraccount.website namybotter.info face-book-support.email dardash.club sendbird-chat.com camilleoconnell.website natemunson.com jorah-mormont.info karenwheeler.club alain.ps rachel-green.info sec-outluck.com engin-altan.website meet-me.chat sopotfile.website rocket-chat.com sherlock-holmes.club hotimael.com buymicrosft.com usr-accounts-validation.pw italk-chat.com shailene-tris.xyz daario-naharis.info graceygretchen.info shailene-hazel.life appchecker.us ran-togomory.com debra-morgan.com chat-often.com saratancredi.info wab-whtsap.com aslaug-sigurd.info hazel-grace.info account-googlc.com myboon.website apkapps.pro arthursaito.club kristy-milligan.website bbc-learning.com joycebyers.club donna-paulsen.info zee-player.website gmailservice.us bitgames.world accountusers.website mauricefischer.club mail-police-sec.com upload999.com claire-browne.info ezofiezo.website margaery-tyrell.info accaunts-googlc.com 1jve.com lord-varys.info police-sec.club accountforuser.website pml-sac.info esofiezo.website tyrion-lannister.info david-mclean.club win-laive.com matthew-stevens.club sapport-accounts.com whispers-talk.com richard-hines.website everyservices.space cerseilannister.info yahaoa.com lindamullins.info cassy-gray.club hoopoechat.com hctmial.com parrotchat.co mary-crawley.com sportliner.website bob-turco.website spgbotup.club help-live.club zee-player.com sybil-parks.info aryastark.info david-moris.website katie.party nissour-beton.com clarke-taylor.life winlife.host eleanor-guthrie.info account-gocgle.com mail-goog1e.com black-honey.club kate-austen.info bestbitloly.website bellamy-bob.life michael-keaton.info heyapp.website dachfunny.us websetting.me davos-seaworth.info hayleymarshal.com serv2.sandtengineers.info web-wtsapp.com cecilia-dobrev.com whatsaapp.us jon-snow.pro accounts-googlc.com shortupload.com olivia-hartman.info police-sec.info lyanna-stark.info harvey-ross.info clarke-griffin.info leslie-barnes.website miranda-barlow.website help-sec.club mail-accout.club freya.miranda-barlow.website ososezo.club lexi-branson.website mygift.website ross-gelller.info yohoa-users.com mediauploader.info sec-acoaunt.com sanblitch.club katesacker.club wa-loading.com dardash.info web-wnatzapp.com cecilia-gilbert.com activedardash.club jack-wagner.website max-mayfield.com geny-wise.com fasebookvideo.com whatzopp.com accountforusers.website sanjynono.website mail-mofa-pna.com billy-bones.info lincoln-blake.website top4up.website rose-sturat.info namyyeatop.club hcttmail.com octavia-blake.world whowatchyou.com pmo-gov.info marklavi.com kaniel-outis.info wab-watzapp.com hareyupnow.club miwakosato.club exvsnomy.club accounts-gocgle.com maxlight.us secureaccountes.com pure-talk.com masuka.club young-spencer.com sahemnews.dynamicdns.co.uk login-yohoo.com davina-claire.xyz liz-keen.website james-charles.club wes-gibbins.com selin-yilmaz.info moneymotion.club redirect-wa.com maria-bouchard.website sophie-deverau.xyz lagertha-lothbrok.info youngmija.club italk-chat.info appuree.info shahrukh-khan.club mail-pmi-pna.com sahem.pcanywhere.net	N/A	cc40a67b3844116c594fd192055d62498f9907d46cc84afd6bfaefa3b6b665a9 1f015490141eca78f98a0dc32089ed7430819e763e909007ab97dc76fcf9803a cf2d7545b1f5ec57142727f795e07e85b84cbfe9a8b9f75aa5219495c746d853 93a21428286602cfe02380a33411cb9d25004f627c685b4363e9ffb3baa5f201 56007b32b896991527fbc3fa806418ecd954518758ed04e4b03a4079b754061b b6326e17ec8307edf63e731c635fbfa8469d9264cb414592e2d2a5c71093d809 6befd9dac5286f72516bba531371dc7769d9efecf56c8a44ce0c8de164662c6b 7e4a5c61a6d7718381884ac7675f335282169641518379ea921731cf08c95b49 ed6c375e86fb5670bb23fe060399bf2232099197a3e226f318d54cdf9b1b946a d756387e7becead2ff2d035d94282741f5d6c04129cb0a1dceefd71eefabcb35 6307bee86c07f0d24a4708a2265aebf44126389da4649e83d38d3d76a4a18a57 e0e1addc23a032b538a344498e862b808e767ce8bed9412dd8990d00b1d64b34 46f5df76f723e67a42ef49cce8d84a0f9af869b170f730df01d29138b36d3f24 76962d334b894349a512d8e533c8373b71389f1d20fd814cd8e7ecc89ed8530a 9db025bb854b4d9cd9d9bb29a626501e89c6f4704953b852f3b7c4fae5389f13 d16b235d931d4eecb38365af538be023bebdb547f8aadf69de4aadfabc65620a 5de5b948aeca6e0811f9625dec48601133913c24e419ce99f75596cb04503141 6665a99e53b2d28497e4edba4c67b8e587b9291d524c737235c69379a00190ae 541583f20ec349ea3ce921c2a54194559bbd90bbd0b954f1f8562ae88bbffc6e 3b22e84e7edb9b7277672a1341f8a347094797beb8e8ee80e09fdb9a9230fc76 79af9a040c633914b911be45ef4301979e2c54bd65f47391432bf9cdecb797a9 9a8bb68564c8cd38e47a91c816776a84d78dfe5bd35cd014400e87cb76ca9440 fe074e77cf64227b6f79d08cae573dd8d48e32e72abf8482a1a4d7a6e42b4f2d 1995f315d0431141b25dd2962a2b517bc27d0ba694fddf982d970f512f784945 7daa98b750217a72e6e1e33878e9ec737c871563d3bd98e20610926607d9a05d 66bd32489206fdbb8b5d15f589e999db1b8e67c9102244735ac154123f2e9495 6ab11df57111af5c4965d3d39a3e8fe710c3eb7a1ba013e74551c14f42c5bb67 461e9c8fb2b0a049df3b5fccd9c453c65d30ee02699f715da09796a5bb236f7c dd43001cfdbfe1cdade2f8a969580b4e134dbb66d0517518afc773f22e9f97e0 14c846939641eb575f78fc8f1ecb2dc76979a5e08366e1809be24fad240f6ad6 cbf9a0737e27fafafaff5c73825bb96907a976b230bf18843badd7b10d475eb2 e14f99608a8d16cdd17786d218e173b44bbf9d5e30387d949a72604ec29cc4c6 f11cdfdad004425780dfed26a604f9b1f0738598180f34204073e6dcb16fc4d0 815f3fd9353ad54dbec0cc1f3cf86477f2f812f995385ac701759959c444a7f1 14b739028e1e85a95cd2efc4019fdae9a49622afe07d8ef542634b1908baedee c38d2a739d9a4e7df51176c95abc43ba606928c5d88b3ebcd7202dbaa0499e35 d209352b6814660ccfc95c5ff7f780d395cdca18d793db8bd3004fd8ba9b6922 e59dfdb9da28e2d8016e40f09f1744b45379eebe02d3244a9dd7327b787923b8 4b5dafd98fdffe2736787281db233f8f1e904b05e70acbfa2358cb901269d039 2240c56c98c90acc0cbc58ba0ea6f7d78bb2f80d97f5c23e2a6e0ba5e2db4960 1a9d5717622111e73cd11617bf29b9e8e9c50a83b90c85dee909faad24684585 b09f657063d254e4ce73d35a9da1aee9e1662ad8d8458a19f08cc32de53035e1 8a7f8ab2bd774ce6861d1e86f52ad8ae2df2a2ac84e86a1f2e362b73c7f077f7 27d89d88db6fe1365e2c1ded2e8af805c353d741bfd45023e9f67e2cc8c4d28e 0fe9facdb01a4836036eaccaafd386721095b18c890d676e8d387647153fa927 964be0420d65b6581d970a7b330f8c0b85fe735d1f7fbfc21dafbc3bf8b4db39 566385bff532d1eb26b49363b8d91ed6881f860ffa4b5ddb2bb5fe068bb6c87e 56f13b40f115af5114445d6ea04e5c00b19302ec4425e1995e423f0cd4cc3cf0 65495e63799a0e919937d83dee6f059a1cd2affe5411ba7d6fc454e36c0571e8 99dbcf0200ec3d046c92f32e4494590c18667f163f97cc9f5a2fb8f4a5c83da5 91b3eeb8ba6853cab5f2669267cf9bccdba389149cc8b2c32656af62bd016b04 e431aa55ad197aa027ab51c22c2afa01454fb7cb9a4e4d4cec8f5a9c2ad735e8 9cff78daf29290514b088272db4f0502c5f969905c6bebfdf5a022ddbb69b248 96ab58d8ffb99f4b3b87afb48ceed3be01e9f8de333be0b91efd39fc7a99eeb3 ec1ed9b064ffbd237e1808d4e156d011b8b77402042b7a6fee92923b69ba65d4 7752f5662d904a261eb57a948278d0804efef827c1bec6337e6b210a00635a27 28f268634533858725500b1e05d85174d29f58f51d9b2af3f75daabdc9a4f32b dfbd6e916ab1660f4fd87552fd392e43122e797ca8d66aa3123623cd70b78d0c 80c699542658187826266a4aab84edc1fef5fde53281168806efb3e0e77e82b1 90236bcdd71611256642ea4e76cf8fdccb2af8fd37da1a4bc7f0844d0fc6be7d 8d5f5be15c93f57a6349dd9ce1637c5a8913523745f502f37cd1a0691db30693 66d1d6f099a1aadd8d747a4b3cefeb72d835eaa55ec5392ff55fd6e892d90344 b7007d2039abaf8b8b0db77241d400a8c4d3b48c6fece5d80dc69905d4d272c3 4e681d242bebf64bbba3f0da91ad109dd14f26e97cd62f306e9fca1603a0009e a841b71431e19df7e925d10a6e43a965fc68ccbb6523b447de82c516cfba93a8 1b3fddc07f524b22559a6c6688ff90fd0e7f035a5ac36237be5e28a10887e928 f047aefc87d9d5bdcb507db857b5e16cb7e7177452480ac18d8e34069f289174 ddfe29e690f8ecd08c6efd304ac89283967b63e9e0ea508d8b69ab4a5365f038 7dea246c7f97f0526f622e03ee6a56cf11681338d30b2a0a4d30c00821ccfa72 1702b7038a1a1dc514054d3070939b4c1fabf3b51a0192d64dcd4f934c27b3ca 2ff47bb5ce6baacba85047c43afe1f3a7f034f1dd547c385394055afa4ba64bc 313ae27ec66e533f7224d99c1a0c254272818d031456359d3dc85f02f21fd992 d17308fb06760de1b06d03448a01f3762f2712c1a66b50c8d5f4ac061d6deb27 e2cb9140c47492e7931e0b6629caf5c03cbc4e7a28c7976a28e3158b5d1c67fb 46c5bec32c558b9c4aa0775759568a730211baf8807e797b4bd21707dd40dee4 76e0e770d2abbf7ea63b0221ef0b0f799f54792004f15a2a9e1e7844cf8b1965 1c0e3895f264ac51e185045aa2bf38102da5b340eb3c3c3f6aacb7476c294d62 79947899241dde6bb6c3b82d8a0841928fa25333909907ddafeddcc987d37fb9 371f13e4dacb0a740752a2352f09804bae99887b833c6989feb211702b3679cb 93da08ced346b9958e34bda4fe41062572253472c762a3a837e0dd368fffec8b 51e2630f942578d81ed000aa8a7b5ff7e19608a53323092ba72bc3b686614e25 c417cacb2fc6160e3754e552f6ac9006350a1fa016c987a885d3e4e1c33c84b6 46976081c1bcec4daa9701fbe373010c0bcb17463359a91556f09339522b6a13 1aa881100698621fab59ebe8caf0a7b422bee42137c3dcf0edd5e6608286e1da 885fcf646972f40a775388f29a51fbb9232a9e000a2cc53eeb3125ba6e696020 9d567bf55bce66ae9419f90c59570f51df54cb5fc1d6d360e3e13c42aa74c2bb 28a9a97927e76c5c9228ef465f78feea51f0d47e6e0c1440f38f2bc1230ae437 455c5bbcc9b90a2799d4a5477950bbcc102757a4216cbcbb749a6fe74de4bb15 823f66c8d27294e54d0fdc91629bd8487af9b9ee034d06cc8dacc6ca5ac32926 7d7d554e84deae2c46bc2a9bf747207303deb50dc5996b018336035ac7a80059 be809f5442aa5a60cbb07556ea25e7730078f1d44d5b0e7bb31b14193cfe9ba2 91cbeb6b02575423621e0a0871efca3b6d25004ce9c1700b97748e2d330b60fb 4842cff6fc7a7a413ceed132f735eee3121ffb03f98453dae966f900e341dd52 bdea751c2e106a4f83d8ba32b1f193a3aa65bf3aba4405e025887bb66cb7a0c3 8d184f24277ace3dd55811c3ed5b810eaa34a1c9bff0de2a15eb996134e9e241 9d629d20fdb0d4650a3c1a308028c7c51d673770a988d78cccb4bb819ffc08a8 5c4733a5dabeda2dcd8602b12a86460bca6ed33ac1197045536ed8e7afbe9244 0537cdd971843545ce569415226dfabd1053a149a2586f163b58f7cb46e80ac5 5dd46064501235c0d02ae9155d6d5f0b526703a8244da5d8299f590b427a3c2e 183ec1960e40b0831fbc47bbd87de530a1f92de02b1a60eb91771ef5d7dd016b ac8ecb7190b7c3c7a2f45ddc26040dae5e048b8c6c657c78007412e7ee56d50e dac29a5e7f19b51c9cff249b8e930d15913a92907f96bcc20f7de8ef3d0185f3 bea4915454933db54ddc1d41c9e5d06dc7c4abdf5ae4a768239b32733498e10f 8da31d3102524d6a2906d1ffa1118edf39cf54d72456937bfbae5546e09a3c32 58ddd057ec7f2420ce94cf3fc52794d0f62603ca7eaf8c5911f55b8b100ac493 4ebb385b0bf460d8561c39af8b69144bfe8c7a4d8607b157784674de653b9a05 377716c6a2b73c94d3307e9f2ea1a5b3774fa42df452c0867e7384eb45422e4f ca8d892a616feaf240bd9e05a250db8ed4d56b7db6348bbaa415dec1e0c626f3 961ec09537004445b85ab79c0ff69fea08d619da97344a792b689223ca1d5b43 59689c7112d94170e669fd692dfa807a064ecce2f1e505ddda7cd6874dbc351c 86e453b251707eb2b73a3f547d7ed34af2b850fd9d319143c22778dd73066901 e7d7f110369a67dd1129c5fbd38daeadcc01c2ab3ced98e2a3135283678e1914 adcc3186e92f9ffe6277443b918cef997f2debbd84f7ccba974ab89bedfe90a3 1f18aac7c04725c934f6cfbbcdc1e170c80ca8bd51a722a462fa2fd2ef549923 c5f576339f5389518d9cf7ed8efe2727b5685ccdd55f5f862411b17138b44c73 a9ba4e59e1d4bc3757d276c9c083e0a1c13843ff32c0cb45b29b60cb6586e022 6c53feb4b6cac4ac7c17227b076ff3248bfae37d21802646db7540d3748029bf 16327e5fbb60bc8f57ba2bbfe02c0464ce0755312a10f566cd7123cf978160d3 b806eaa463d6da64caf3e04f6344ce113a2b12c5107e37cd0ddaa382a7932a36 dd21373738175567c92de2031e9efce761ba8d1fe6c6e04e69648e7528eed309 d6a7c537a3101c38d0bafdcde685ad97ebc15ecac6bfa6eacba80b933ae8a151 3a6ce795b393cf05daa2fcb82eb7c0fee5b1b0b7cd268d6432aace0e8ca42e27 597d362a1206b0d69e3c69a0a2f1725589af239c56d5de781622d317602b1f11 6bdf6f1d5a8a4c94589ab9f1d40db7e7710bae82f143209f058b6e0b8f25884d 453437ea43a67536b5724bb0e6bf576fb510ff1d6ea5307cfa7ec8ee46c0dc8f

OngoingAndroidMalwareCampaignTargetsPalestinians-Part2_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
OngoingAndroidMalwareCampaignTargetsPalestinians-Part2_SymantecBlogs.pdf (Click name to open as page)	com.android	N/A	N/A

DarkHydrusUsesPhisherytoHarvestCredentialsintheMiddleEast-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
DarkHydrusUsesPhisherytoHarvestCredentialsintheMiddleEast-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.us jobs.jobvite.com 0utl00k.net www.reddit.com cert.gov er.com	195.154.41.150	0b1d5e17443f0896c959d22fa15dadcae5ab083a35b3ff6cb48c7f967649ec82 d393349a4ad00902e3d415b622cf27987a0170a786ca3a1f991a521bff645318 9eac37a5c675cd1750cd50b01fc05085ce0092a19ba97026292a60b11b45bf49

'OperationOceansalt'DeliversWaveAfterWave_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
'OperationOceansalt'DeliversWaveAfterWave_McAfeeBlogs.pdf (Click name to open as page)	N/A	N/A	N/A

Android_TimpDoorTurnsMobileDevicesIntoHiddenProxies_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
Android_TimpDoorTurnsMobileDevicesIntoHiddenProxies_McAfeeBlogs.pdf (Click name to open as page)	blog.checkpoint.com 800notes.com ndwhocallsyou.com	199.192.19.18	N/A

OilRigTargetsaMiddleEasternGovernmentandAddsEvasionTechniquestoOopsIE-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigTargetsaMiddleEasternGovernmentandAddsEvasionTechniquestoOopsIE-PaloAltoNetworksBlog.pdf (Click name to open as page)	jobs.jobvite.com update.com www.reddit.com er.com blog.talosintelligence.com windowspatch.com www.windowspatch.com	N/A	9e8ec04e534db1e714159cc68891be454c2459f179ab1df27d7f89d2b6793b17

scarlet-mimic-full-report_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
scarlet-mimic-full-report_PaloAltoNetworks.pdf (Click name to open as page)	ftp112.lenta.cloudns.pw yourturbe.org dolat.websurprisemail.com apple.lenovositegroup.com worldwildlife.effers.com account.websurprisemail.com clean.popqueen.cloudns.org bailee.alanna.cloudns.biz mareva.catherine.cloudns.us webmail.yourturbe.org dolet.websurprisemail.com qq.ufoneconference.com desk.websurprisemail.com mm.lenovositegroup.com otcgk.border.cloudns.pw freeavg.sytes.net fish.seafood.cloudns.org www.angleegg.xxxy.info yycc.mrbonus.com aaa123.spdns.de video.googmail.org email.googmail.org alma.apple.cloudns.org dolat.diyarpakzimin.com uprnd.flnet.org apple12.crabdance.com zjhao.dtdns.net vip.yahoo.cloudns.info klark.cloudns.in press.ufoneconference.com addi.apple.cloudns.org economy.spdns.de ziba.lenovositegroup.com oic-oci.3-a.net mail.firewall-gateway.com qq.yourturbe.org kasperskysecurity.firewall-gateway.com polat.googmail.org islam.youtubesitegroup.com sys.firewall-gateway.net firewallupdate.firewall-gateway.net intersecurity.firewall-gateway.com liumingzhen.myftp.org lemondtree.freetcp.com addnow.zapto.org fsb.ru ibmcorp.slyip.com accounts.yourturbe.org admin.spdns.org kissecurity.firewall-gateway.net opero.spdns.org googmail.org muslim.islamhood.net popqueen.cloudns.org www.angleegg.ddns.us lenovositegroup.com news.firewall-gateway.com ppcc.vasilevich.cloudns.info economy.spdns.eu bee.aoto.cloudns.org book.websurprisemail.com ufoneconference.com detail43.myfirewall.org websurprisemail.com freeonline.3d-game.com eemete.freetcp.com update.googmail.org firefox.spdns.de kaspersky.firewall-gateway.net news.googmail.org sisiow.slyip.com github.ignorelist.com liumingzhen.zapto.org www.gorlan.cloudns.pro bits.githubs.net gateway.com youturbe.co.cc www.googmail.org	59.188.239.117 68.71.35.135 118.193.212.12	2e1472a65a8df43c8bc9b0aff954fbc1a093c4214f6a718a08e1321db83ca683 fa08a498da0b31e77669d51a28dff166d84983fa6af693063c08f312fdce93e3 5dade00db195087aa336ce190b5fd1c22992c49556c623b42a9f742d73241a7f 47d9ba5f7bf70c5d2b7a832e070957cc7ebdcfd0a6ee75851df16dc45971ce8a 53cecc0d0f6924eacd23c49d0d95a6381834360fbbe2356778feb8dd396d723e 7fb2c37431fd7b05414b134732ba0b29cd7dad17fc176627ee0815aac60c1ab9 3d9bd26f5bd5401efa17690357f40054a3d7b438ce8c91367dbf469f0d9bd520 00bb399c429e0f1f7de751103fe92b5f820d1686d01662a08583b7a94aaed94e 0f2db64b8283b76d49c9bb272beafab8323f941b6dc3888b42ff02f08634d016 77e4ef9e08f1095487b4fa27492b4c9b8e833f29598f99a0d10f7c85b4254761 95dba004f949e44cb447246f3d2420b01db4541d0e4fa7b00d798f38a3d251e4 508a7cab0f2a69ba66e92e86817a49ecd1b9c8ae11a995147944995fc868dfad 79aca57905cca1e56b0cedf48a4d81812639c333ee6532d90a074d64b3852d6f 523ad50b498bfb5ab688d9b1958c8058f905b634befc65e96f9f947e40893e5b 53af257a42a8f182e97dcbb8d22227c27d654bea756d7f34a80cc7982b70aa60 3209ab95ca7ee7d8c0140f95bdb61a37d69810a7a23d90d63ecc69cc8c51db90 4a3d0df9fa198a7ebe45db5239d22067e74924b1aace52029b3acc9b51af691e c981db20d588ba2d0f437b4e5459e7c6763f52a97841450c94591ca28a9a2d69 e96097826179a66cc3061be0f99f7b55cc9692a6378b5c4364699327823098ab d1dd4469c7b5c462e5ff2dcef5d22775250e9ebf395f65da624f18ea7144e173 5fae5750797ebe7e7a6a6919a7d66deffb141ec28737bd72a1f7da8edd330b60 caeace73a17e220634525d2a4117525fd60cb86a06873c86571e89d156f8d72d 41948c73b776b673f954f497e09cc469d55f27e7b6e19acb41b77f7e64c50a33 6f10c892133b5dac6c40cfe77ca32b42572bc56909481b236080dfc143ef9afd a4abbcfdbf4a6c52349a843eac0396e6d8abb05f1324223980d824629a42ef7a 092085e76512f071cab12f76ed09b348 c1e8ff8ebe3754bc7d14509ef3678edf7551d876d3fa847d07d469c09bceae91 6a1c7999b4ba92899d3364fc729d0f052680be5a71dd0f13cbabdb19b82bf858 8f4cbb78356cb672bf2566e44315eb96 cd506679fd32dab16dee6fbf1cfdfe0836e092a4f5669418a199d99c9cd33abd e8e5ecf525c5259651bfbdf1923215729ec67658225eca1b02519f5f6279eacb b4c1e9c99f861a4dd7654dcc3548ab5ddc15ee5feb9690b9f716c4849714b20d fe75dff8b86dd8989d2ca00df19d51be 33e50c44804d4838dba6627b08210029ff9106fa7fd16cd7255271e153f58b05 7a1410b2eceb99ec268b50e9371e74c1 53238f67ac7e4cc27264efbacc8712bd97a5775feaf633c63adaa0785d038e8a 9b77bbb620f50632fae17c40c7469fc93ffdbc4136a6d893a9a10a44bc435da5 a195f564aa2fb66db119e2fbec93e319a973e5cf50fbf9fc08bd81f9b7ee8af8 ec4deb761b09ddc706804ef669836cf4b199f1d74b14ad623a6f6cc2f38190b8 a569f3b02a4be99e0b4a9f1cff43115da803f0660dd4df114b624316f3f63dc6 5154511a439bb367b7dd56232eb15281cb6dc4d64ea3a06e7fbbe6b176e385d4 0aab09bf0db30a4be28d19475082fd5e7f75879bf9029fdd8dfc3a1e1f072b0c 8da2f9afd914a4318a97f4d74809c0c383f8ebf0d3d6e3d3715efbd71a66a52f 19bbee954ac1a21595e63cb86d1a596236aed353804aec5cb8adfa62e70280d3 3e184a7af74905f3d3acbec913252f72 aa8a302a53bd39b2d2a6e3d8497575e2a5f9757b248e34c8e0821ce9eee5cc32 a1b7fe2acdb7a5b0c52b7c1960cfad531a7ca85b602fc90044c57a2b2531699f 5182dc8667432d76a276dc4f864cdfcef3e481783ebaf46d3b1397080b798f4a b3c9bb22fa1bc358dc23a1a4bdaf85ad1add4d812b107b7ab887affbf689933a 0d77f5f1d4c0f02fb88ac33fa365b17d28d1521cea59329ca4b3dd0b7031a60e 5db51f2f7c31de7d165ec4892ae7dcedaa036caedeef718b57953d7935582f04 fb60d14de4dba022f11437845d465a661d0c78d3d097a38770816f06992bf0af 631fc66e57acd52284aba2608e6f31ba19e2807367e33d8704f572f6af6bd9c3 12dedcdda853da9846014186e6b4a5d6a82ba0cf61d7fa4cbe444a010f682b5d 91e36e720477146f1a0c050d3bc74bc6683a03e7631317ded3c598a10465dcc8 d6d2a77f8ed2fe9fed9ee6dcb4cc0b339ba47a575c717c35815243c752d8f60c de12cd8d11478d17342c60239837c1afcc9fee72df6ffdf9943802640d43f77a 16ab40f84fc47bab2c7874bb3164c5b4 b59e8751b9f61bd4f4b9b62de8242751 a268cc4931781d1d8094a4f8f596c2de3d662f2581c735b0810ff0ecefe3f859 1f3fbb789bcbe9186a50c4f4db269736 bbdedcfe789641e7f244700e8c028ef51094b66508f503876eb0d6aa16df6aa8 7bfbf49aa71b8235a16792ef721b7e4195df11cb75371f651595b37690d108c8 7c9421a4605decfa1b3e22addbca98d86ea757dcd8ff8e075d13228c99618637 4d539f638ed476ca08da838cdfbf710dae82b582256d60a009e9d304f6822e65 6fe33c672fd30bba9bbc89dc7d88993d8783382c9f9c510677b1bb068a5f1e51 db8338e6b883fdceaa02c10ad683547a26ae32e0d4641cc24c7bd3b45154abb0 363d9557861fab2d83d04847b967996361e670e571b335c7a535bc6278cba149 669ce0975c133d54e414dbf1de546aed742e76fe3e60568e2bd4747b7e0f8b70 7156f6416e7116e52f9c67f4e716b1dbea17387e61009c7f2825debbbb4dcb73 c30d03750458bb5f2b03d6bd399ffca6d378a3adb5a74bee3b6ba4b982dbf273 d698008e417da867d02e2f5cdcc80ff92af753dd585fada42fc611c2d7332c3a cc7db456825e266849090b6fa95a94ad8c4c717712b610b0d39077af5222f4be be0e8da7e261ec7d08eaa78e79ceb1be47c324b8e142097bf6569f9471c98a4e 435df30d139ccbe5ce4e5ca6fe072e42e96d5ea1efd5317deebce462ecccc7ab 071c34b9701dd84f9590ba899a8af3eeec228a928f2d98a80dbc780e396ee01a 83ec457cba27e470404c942eb9242eeb c7b9e6b5ab07e6da404af9894c8422d9a0c9586334ddc0a3c1ea6bf23ef97fb2 03004ccc23033a09532bea7dfa08c8dfa85814a15f5e3aedb924a028bcd6f908 a9f0bddc3d3516af8355e8ac17309528cd018347e5f56a347c14da0a83b0028a a4ffca5f1c3d9c21629fa98a1e91121d954ab9347e86ac3c9613dae61bf30393 4313d9d5fc6a090e2abc41633cb2c1fd 8c423506c0c7ebe1e61071374ecf0806463a02a2100b5daa1bd942129ff8a235 caf76e19a2681dd000c96d8389afc749e774c083aef09f023d4f42fbc49d4d3d 202975d10ba417cf441e8f9986d2496807fe39e057d3226ec3b2713f0c218cd8 f511b13341c9fb4ec9ecfcfe5a5813b964c362d7c709c402ead4e010d857bf6c 4a4dfffae6fc8be77ac9b2c67da547f0d57ffae59e0687a356f5105fdddc88a3 d1f0658bbb15ab2bccc210d7e1f21b96e14ae22de8494ca95b12e182f3d0f693 27167a9d63f5ddc68a12decb1a1e0a2a29c72fe0681dca2c4f3d169f048a9d38 9adda3d95535c6cf83a1ba08fe83f718f5c722e06d0caff8eab4a564185971c5 55b7a118203a831cc69b37b785015c54 22e7517d8996e92998eb996416f9d8ef06b3b1c220c1a5d29ccd5aaef7b10c72 9ff687a813a5cb5ff10374c86f852534c1aa3e5a221123214bf52b2ff455a5da 879edf0417c4a9759040b51bf83b2fc918a6644a7c29a52252003a63036aea5c df9872d1dc1dbb101bf83c7e7d689d2d6df09966481a365f92cd451ef55f047d 428121c421bf81a0d689014cf21ec7951b0c32add86198e06f7d636981f68755 30337e99631a174d822dd3ea00a5f6cf

PrinceofPersia_TheSandsofFoudre-Intezer.pdf

Report name	Domains	Hosts	Samples
PrinceofPersia_TheSandsofFoudre-Intezer.pdf (Click name to open as page)	www.intezer.com f8b65751.space ns2.cf75d89b.space 1f0e7a56.space ns1.cf75d89b.space analyze.intezer.com 1d8bfc20.space 607d6cdc.space 891ec9e9.space 8fb167c7.space 68094ac0.space fe19f97f.space dynu.net 177a5c4a.space	185.61.154.26	N/A

NOKKIAlmostTiestheKnotwithDOGCALL_ReaperGroupUsesNewMalwaretoDeployRAT-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NOKKIAlmostTiestheKnotwithDOGCALL_ReaperGroupUsesNewMalwaretoDeployRAT-PaloAltoNetworksBlog.pdf (Click name to open as page)	kmbr1.nitesbr1.org jobs.jobvite.com www.thedrive.com www.reddit.com er.com www.espn.co.uk reeye.com	N/A	66a0c294ee8f3507d723a376065798631906128ce79bd6dfd8f025eda6b75e51 0669c71740134323793429d10518576b42941f9eee0def6057ed9a4ba87a3a9a 0f1d3ed85fee2acc23a8a26e0dc12e0f a2fe5dcb08ae8b72e8bc98ddc0b918e7 d13fc918433c705b49db74c91f56ae6c0cb5cf8d 05d43d417a8f50e7b23246643fc7e03d

TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers«TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers«TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers_FireEyeInc.pdf (Click name to open as page)	reeye.com	87.245.143.140	N/A

OilRigUsesUpdatedBONDUPDATERtoTargetMiddleEasternGovernment-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigUsesUpdatedBONDUPDATERtoTargetMiddleEasternGovernment-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.reddit.com withyourface.com jobs.jobvite.com reeye.com er.com	99.250.250.199	d5c1822a36f2e7107d0d4c005c26978d00bcb34a587bd9ccf11ae7761ec73fb7 c0018a2e36c7ef8aa15b81001a19c4127ad7cd21ae410c1f854e5dadfa98b322 7cbad6b3f505a199d6766a86b41ed23786bbb99dab9cae6c18936afdc2512f00

NewKONNIMalwareattackingEurasiaandSoutheastAsia-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewKONNIMalwareattackingEurasiaandSoutheastAsia-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.rohitab.com les.000webhost.com www.reddit.com net.com er.com blog.talosintelligence.com jobs.jobvite.com co.kr	210.112.239.74 141.223.125.112 145.14.145.32	9b1a21d352ededd057ee3a965907126dd11d13474028a429d91e2349b1f00e10 0657f788e89a437a1e6fe2630c19436736aa55dcf255540698864a7576192611 4e84f97bb61c2d373a574676fa374131460839ecc7b53064f558ce7ce55528ad 02ee6302436250e1cee1e75cf452a127b397be8d d5fc0ef2d1ed037b5b6389882f9bb4ea15a6b41f21cdc0f5e90752f4e687445c 0d98ca35b29d2a9f7ca6908747c457ebdba999f0e83e182f770848e2335ade5b 2922b7b969d96d206abc572a5cb83e69ab32ca18 ae27e617f4197cd30cc09fe784453cd4 c07bea0928a35b9292eebab32563378d01d95434d098e5c7c076e94866a14212 dce53e59b0c48e269dadc766a78667a14f11b72c49f57d95abde62c84ac8d7ae 2b6b6f24f58072a02f03fa04deaccce04b6bb43b d211815177ce4b9fd2d3c258d2fc6282c23b8458d71f8f6f0df06a9dda89c12f d92c94423ec3d01ad584a74a38a2e817449648a4da3f12d345c611edc5c4cdbd b8120d5c9c2c889b37aa9e37514a3b4964c6e41296be216b327cdccd2e908311 dc739ca07585eab7394843bc4dba2faca8e5bfe0 74ddd56b1e33aa3752f143a77e5802a5803fd2c222f2cca77bfa5c740dfc8f5e c3172b403068aabc711b7cbe4d923ae1fa705ce11c4cc71271fde83ce751c21c 48f031f8120554a5f47259666fd0ee02 1cc8ceeef9a2ea4260fae03368a9d07d56e8331b

ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies-Intezer.pdf

Report name	Domains	Hosts	Samples
ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies-Intezer.pdf (Click name to open as page)	www.intezer.com mtn.co.kr www.operationblockbuster.com analyze.intezer.com blog.talosintelligence.com reeye.com baesystemsai.blogspot.com	N/A	N/A

NewTechniquestoUncoverandAttributeFinancialactorsCommodityBuildersandInfrastructureRevealed-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewTechniquestoUncoverandAttributeFinancialactorsCommodityBuildersandInfrastructureRevealed-PaloAltoNetworksBlog.pdf (Click name to open as page)	document.biz contents.bz jobs.jobvite.com total7.biz dropbox.biz judgebin.bz www.reddit.com webclient1.biz transef.biz le.biz freecloud.biz bnet1.biz s3.sovereigncars.org.uk mycontent.biz www.pedidoslalacteo.com.ar 368.com 365.com fundsxe.com les.com documents.biz zstorage.biz cloud.biz calwebmedia.com net.biz direct.biz ack.mitre.org www.europol.europa.eu rstcloud.biz centrum.cz er.com blog.talosintelligence.com yourdocument.biz www.mky.com www.proofpoint.com via24.biz mail.halcyonih.com share.biz goo.gl xstorage.biz server838.com ulaval.ca www.bit.do arubrabank.com fundswp.com one.biz blog.morphisec.com	N/A	d5328e519daadaf1520619da1f24f6d81d23c84222640058bbb366752be93537 cb5644bd670dcd9caf5185ebe396996e514ed1d93982157186611135aea79bd3 187e0d911cd0393caad1364ded1c394257cd149898b31f9718c7c6319af79818 d8a2384a51cd59f6390e6a4fcb04b51358cdbd5e04cae5be23daae548c306a73 5ac1612535b6981259cfac95efe84c5608cf51e3a49b9c1e00c5d374f90d10b2 195580b78e144f66ac1f9be2b927d7828ed1dc3974dc1897e0ed59a96ac8f4e1 94c9fa812cebb733eda3a4eed33a0a49b60c207bb0f9153c0d08724c8b30f578 12ecb6b3780cd19ea84f6e84e816a701e8231441bf90145481baa0648139e001 62a278119d732e4c839ee074553f087588a9040be027bdf9e617413c6fd2e9af a0111977c79f4eb30511f22055b54e4e973c0501240f3ba462691b1b4999d561 e657fe761effbe7e11e3cc343ba6845c2c9a6c989e7b805717d2e1417387528f 477c432382c97648767ee45c264f0f2aaf8d3d9f9ed547d8418db12b7c140760 988d430ce0e9f19634cf7955eac6eb03e3b7774b788010c2a9742b38016d1ebf a5f2ad08b5afdbd5317b51d0d2dd8f781903522844c786a11a0957a81abfd29e 57f65ecb239833e5a4b2441e3a2daf3513356d45e1d5c311baeb31f4d503703e 19dc9b93870ddc3beb7fdeea2980c95edc489040e39381d89d0dfe0a825a1570 161ba501b4ea6f7c2c8d224e55e566fef95064e1ed059d8287bc07e790f740e8 444c63bb794abe3d2b524e0cb2c8dcc174279b23b1bce949a7125df9fab25c1c 9d6fd7239e1baac696c001cabedfeb72cf0c26991831819c3124a0a726e8fe23 641d692386dab5ca60f4c6b1da0edecc5c3473c9a7d187dad6098786404780a3 020ba5a273c0992d62faa05144aed7f174af64c836bf82009ada46f1ce3b6eee 8004601c08983420408d2784e2a4aa79de426d41a09726a884edcb21f83ee7f8 e0f1dbc10088b68f772ee73b0785c3d67b8e5f147b687911613d163ad5ebda6d 8a6d2cccb6f2007cb7fa29d3f009f9fbe305bffc45dc35d3828f2dc3c41b3cb7

AnalyzingOilRig'sOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
AnalyzingOilRig'sOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf (Click name to open as page)	jobs.jobvite.com www.reddit.com withyourface.com paloaltonetworks.sharepoint.com er.com	N/A	a5bec7573b743932329b794042f38571dd91731ae50757317bdaf9e820ec8d5e 66d678b097a2245f60f3d95bb608f3958aa0f5f19ca7e5853f38ea79885b9633 7cbad6b3f505a199d6766a86b41ed23786bbb99dab9cae6c18936afdc2512f00 687027d966667780ab786635b0d4274b651f27d99717c5ba95e139e94ef114c3 6719e80361950cdb10c4a4fcccc389c2a26eaab761c202870353fe65e8f954a3 364e2884251c151a29071a5975ca0076405a8cc2bab8da3e784491632ec07f56

InceptionAttackersTargetEuropewithYear-oldOfficeVulnerability-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
InceptionAttackersTargetEuropewithYear-oldOfficeVulnerability-PaloAltoNetworksBlog.pdf (Click name to open as page)	blog.ropchain.com jobs.jobvite.com www.reddit.com er.com ng.wordpress.com nvd.nist.gov www.epc.eu	51.255.139.194 188.165.62.40	2bcb8a4ddc2150b25a44c292db870124c65687444f96e078f575da69bbf018e0 8aef4975d9c51821c4fa8ee1cbfe9c1f4a88c8784427d467ea99b2c1dabe15ae cc64a68ba52283f6cf5521cf75567b3c5b5143f324d37c59906ee63f1bbafcaf 72eb022f395cc15bbe9582ee02f977ea0692932461a8b0bd608d9f0971125999 49dbcf1fc8d3381e495089f396727a959885c1dd2ab6cd202cf3c4dbd1d27c4f 687ee860fd5cd9902b441c26d72788d5a52052d03047a9b071808fc4c53a7e8b 13de9678279b6ce6d81aeb32c0dd9f7458ad1f92aee17f3e052be9f06d473bed 8b212ee2d65c4da033c39aebaf59cc51ade45f32f4d91d1daa0bd367889f934d

NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign«NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign«NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign_FireEyeInc.pdf (Click name to open as page)	northshorehealthgm.org pandorasong.com tutanota.com www.jmj.com eforms.state.gov reeye.com	95.216.59.92	16bbc967a8b6a365871a05c74a4f345b 3fccf531ff0ae6fedd7c586774b17a2d 2b13b244aafe1ecace61ea1119a1b2ee 658c6fe38f95995fa8dc8f6cfe41df7b 313f4808aa2a2073005d219bc68971cd 6ed0020b0851fb71d5b0076f4ee95f3c f713d5df826c6051e65f995e57d6817d

SofacyContinuesGlobalAttacksandWheelsOutNew‘Cannon’Trojan-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
SofacyContinuesGlobalAttacksandWheelsOutNew‘Cannon’Trojan-PaloAltoNetworksBlog.pdf (Click name to open as page)	post.cz jobs.jobvite.com schemas.openxmlformats.org www.reddit.com er.com pop.seznam.cz	200.122.181.25 188.241.58.170	6ad3eb8b5622145a70bec67b3d14868a1c13864864afd651fe70689c95b1399a fc69fb278e12fc7f9c49a020eff9f84c58b71e680a9e18f78d4e6540693f557d 2cfc4b3686511f959f14889d26d3d9a0d06e27ee2bb54c9afb1ada6b8205c55f af77e845f1b0a3ae32cb5cfa53ff22cc9dae883f05200e18ad8e10d7a8106392 61a1f3b4fb4dbd2877c91e81db4b1af8395547eab199bf920e9dd11a1127221e f1e2bceae81ccd54777f7862c616f22b581b47e0dda5cb02d0a722168ef194a5

TheFracturedBlockCampaign_CARROTBATUsedtoDeliverMalwareTargetingSoutheastAsia-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
TheFracturedBlockCampaign_CARROTBATUsedtoDeliverMalwareTargetingSoutheastAsia-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.nknews.org jobs.jobvite.com les.000webhost.com 071790.000webhostapp.com byethost10.com ftp.byethost10.com webhost.com 881.000webhostapp.com bluemountain.1apps.com byethost7.com 7077.000webhostapp.com vnik.000webhostapp.com bytehost31.org koryogroup.com attach10132.1apps.com www.reddit.com filer1.1apps.com hanbosston.000webhostapp.com er.com blog.talosintelligence.com sensepost.com a7788.1apps.com ftp.byethost7.com s8877.1apps.com	61.14.210.72	26fc6fa6acc942d186a31dc62be0de5e07d6201bdff5d7b2f1a7521d1d909847 cf31dac47680ff1375ddaa3720892ed3a7a70d1872ee46e6366e6f93123f58d2 1142dcc02b9ef34dca2f28c22613a0489a653eb0aeafe1370ca4c00200d479e0 da94a331424bc1074512f12d7d98dc5d8c5028821dfcbe83f67f49743ae70652 f27d640283372eb805df794ae700c25f789d77165bb98b7174ee03a617a566d4 fe8d65287dd40ca0a1fadddc4268268b4a77cdb04a490c1a73aa15b6e4f1dd63 62886d8b9289bd92c9b899515ff0c12966b96dd3e4b69a00264da50248254bb7 337b8c2aac80a44f4e7f253a149c65312bc952661169066fe1d4c113348cc27b 9fa69bdc731015aa7bdd86cd311443e6f829fa27a9ba0adcd49fa773fb5e7fa9 42e18ef3aaadac5b40a37ec0b3686c0c2976d65c978a2b685fefe50662876ded 8b6b4a0e0945c6daf3ebc8870e3bd37e54751f95162232d85dc0a0cc8bead9aa d965627a12063172f12d5375c449c3eef505fde1ce4f5566e27ef2882002b5d0 e8381f037a8f70d8fc3ee11a7bec98d6406a289e1372c8ce21cf00e55487dafc a943e196b83c4acd9c5ce13e4c43b4f4 70106ebdbf4411c32596dae3f1ff7bf192b81b0809f8ed1435122bc2a33a2e22 ac23017efc19804de64317cbc90efd63e814b5bb168c300cfec4cfdedf376f4f fe186d04ca6afec2578386b971b5ecb189d8381be055790a9e6f78b3f23c9958 a23f95b4a602bdaef1b58e97843e2f38218554eb57397210a1aaa68508843bd0 7d443434c302431734caf1d034c054ad80493c4c703d5aaeafa4a931a496b2ae 3cbccb059225669dcfdc7542ce28666e0b1a227714eaf4b16869808bffe90b96 7d8376057a937573c099e3afe2d8e4b8ec8cb17e46583a2cab1a4ac4b8be1c97 59b023b30d8a76c5984fe62d2e751875b8b3ebe2d520891458cb66a4e9c40005 e3b45b2e5d3e37f8774ae22a21738ae345e44c07ff58f1ab7178a3a43590fddd e218b19252f242a8f10990ddb749f34430d3d7697cbfb6808542f609d2cbf828 fa712f2bebf30592dd9bba4fc3befced4c727b85a036550fc3ac70d1965f8de5 7ae933ed7fc664df4865840f39bfeaf9daeb3b88dcd921a90366635d59bc15f2 92b45e9a3f26b2eef4a86f3dae029f5821cffec78c6c64334055d75dbf2a62ef 2547b958f7725539e9bba2a1852a163100daa1927bb621b2837bb88007857a48 d34aabf20ccd93df9d43838cea41a7e243009a3ef055966cb9dea75d84b2724d a0f53abde0d15497776e975842e7df350d155b8e63d872a914581314aaa9c1dc dca9bd1c2d068fc9c84a754e4dcf703629fbe2aa33a089cb50a7e33e073f5cea 824f79a8ee7d8a23a0371fab83de44db6014f4d9bdea90b47620064e232fd3e3 3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561980dd e527ade24beacb2ef940210ba9acb21073e2b0dadcd92f1b8f6acd72b523c828 0490e7d24defc2f0a4239e76197f1cba50e7ce4e092080d2f7db13ea0f88120b 3663e7b197efe91fb7879a56c29fb8ed196815e0145436ee2fad5825c29de897 6c591dddd05a2462e252997dc9d1ba09a9d9049df564d00070c7da36e526a66a ba78f0a6ce53682942e97b5ad7ec76a2383468a8b6cd5771209812b6410f10cb 3e4015366126dcdbdcc8b5c508a6d25c 2da750b50ac396a41e99752d791d106b686be10c27c6933f0d3afe762d6d0c48 7cf37067f08b0b8f9c58a35d409fdd6481337bdc2d5f2152f8e8f304f8a472b6 fceceb104bed6c8e85fff87b1bf06fde5b4a57fe7240b562a51727a37034f659 0bb099849ed7076177aa8678de65393ef0d66e026ad5ab6805c1c47222f26358 f4c00cc0d7872fb756e2dc902f1a22d14885bf283c8e183a81b2927b363f5084 cfe436c1f0ce5eb7ac61b32cd073cc4e4b21d5016ceef77575bef2c2783c2d62 ffd1e66c2385dae0bb6dda186f004800eb6ceaed132aec2ea42b1ddcf12a5c4e 87c50166f2ac41bec7b0f3e3dba20c7264ae83b13e9a6489055912d4201cbdfc 22b16fa7af7b51880faceb33dd556242331daf7b7749cabd9d7c9735fb56aa10 5a2c53a20fd66467e87290f5845a5c7d6aa8d460426abd30d4a6adcffca06b8b aef92be267a05cbff83aec0f23d33dfe0c4cdc71f9a424f5a2e59ba62b7091de 5d1388c23c94489d2a166a429b8802d726298be7eb0c95585f2759cebad040cf 2efdd25a8a8f21c661aab2d4110cd7f89cf343ec6a8674ff20a37a1750708f27 ba100e7bac8672b9fd73f2d0b7f419378f81ffb56830f6e27079cb4a064ba39a 1c8351ff968f16ee904031f6fba8628af5ca0db01b9d775137076ead54155968

DearJoohn_TheSofacyGroup’sGlobalCampaign-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
DearJoohn_TheSofacyGroup’sGlobalCampaign-PaloAltoNetworksBlog.pdf (Click name to open as page)	post.cz jobs.jobvite.com www.reddit.com er.com ambcomission.co ambcomission.com www.welivesecurity.com	188.241.58.170	5173721f3054b92e6c0ff2a6a80e4741aa3639bc1906d8b615c3b014a7a1a8d7 b41480d685a961ed033b932d9c363c2a08ad60af1d2b46d4f78b5469dc5d58e3 651d5aab82e53711563ce074c047cbaa0703931673fa3ad20933d6a63c5c3b12 fc69fb278e12fc7f9c49a020eff9f84c58b71e680a9e18f78d4e6540693f557d 215f7c08c2e3ef5835c7ebc9a329b04b8d5215773b7ebfc9fd755d93451ce1ae 2da5a388b891e42df4ed62cffbc167db2021e2441e6075d651ecc1d0ffd32ec8 9a0f00469d67bdb60f542fabb42e8d3a90c214b82f021ac6719c7f30e69ff0b9 4405cfbf28e0dfafa9ea292e494f385592383d2476a9c49d12596b8d22a63c47 c20e5d56b35992fe74e92aebb09c40a9ec4f3d9b3c2a01efbe761fa7921dd97f 40318f3593bca859673827b88d65c5d2f0d80a76948be936a60bda67dff27be9 a23261e2b693750a7009569df96ec4cf61e57acc9424c98d6fe1087ff8c659ce 86bb3b00bcd4878b081e4e4f126bba321b81a17e544d54377a0f590f95209e46 abfc14f7f708f662046bfcad81a719c71a35a8dc5aa111407c2c93496e52db74 2cfc4b3686511f959f14889d26d3d9a0d06e27ee2bb54c9afb1ada6b8205c55f c91843a69dcf3fdad0dac1b2f0139d1bb072787a1cfcf7b6e34a96bc3c081d65 61a1f3b4fb4dbd2877c91e81db4b1af8395547eab199bf920e9dd11a1127221e 054c5aa73d6b6d293170785a82453446429c0efc742df75979b760682ac3026b 174effcdeec0b84c67d7dc23351418f6fa4825550d595344214cc746f1a01c1a ecc5805898e037c2ef9bc52ea6c6e59b537984f84c3d680c8436c6a38bdecdf4 e5aece694d740ebcb107921e890cccc5d7e8f42471f1c4ce108ecb5170ea1e92 79bd5f34867229176869572a027bd601bd8c0bc3f56d37443d403a6d1819a7e5 d06be83a408f4796616b1c446e3637009d7691c131d121eb165c55bdd5ba50b4 ed8f52cdfc5f4c4be95a6b2e935661e00b50324bee5fe8974599743ccfd8daba 6ad3eb8b5622145a70bec67b3d14868a1c13864864afd651fe70689c95b1399a 5749eb9d7b8afa278be24a4db66f122aeb323eaa73a9c9e52d77ac3952da5e7d 861b6bc1f9869017c48930af5848930dd037fb70fc506d8a7e43e1a0dbd1e8cb af77e845f1b0a3ae32cb5cfa53ff22cc9dae883f05200e18ad8e10d7a8106392 b9f3af84a69cd39e2e10a86207f8612dd2839873c5839af533ffbc45fc56f809 34bdb5b364358a07f598da4d26b30bac37e139a7dc2b9914debb3a16311f3ded 77ff53211bd994293400cb3f93e3d3df6754d8d477cb76f52221704adebad83a 5a02d4e5f6d6a89ad41554295114506540f0876e7288464e4a70c9ba51d24f12 0d7b945b9c912d205974f44e3742c696b5038c2120ed4775710ed6d51fbc58ef f1e2bceae81ccd54777f7862c616f22b581b47e0dda5cb02d0a722168ef194a5 cac630c11c4bf6363c067fbf7741eae0ec70238d9c5e60d41f3ed8f65b56c1d1 68df0f924ce79765573156eabffee3a7bb0fa972d2b67d12dd91dea3ec255d24 78adc8e5e4e86146317420fa3b2274c9805f6942c9973963467479cb1bbd4ead

AMissed0day_-RevealanotherCyberArsenalofAPT-C-06-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
AMissed0day_-RevealanotherCyberArsenalofAPT-C-06-360CoreSecurity.pdf (Click name to open as page)	360.cn blogs.360.cn www.zerodayinitiative.com	N/A	N/A

OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussia,ExploitingaZero-day-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussia,ExploitingaZero-day-360CoreSecurity.pdf (Click name to open as page)	blogs.360.cn www.p2f.ru	188.241.58.68	f951362ddcc37337a70571d6eae8f122 2abb76d71fb1b43173589f56e461011b 92b1c50c3ddf8289e85cbb7f8eead077 1cbc626abbe10a4fae6abf0f405c35e2

Shamoon3TargetsOilandGasOrganization-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
Shamoon3TargetsOilandGasOrganization-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.reddit.com www.saipem.com jobs.jobvite.com er.com	N/A	0694bdf9f08e4f4a09d13b7b5a68c0148ceb3fcc79442f4db2aa19dd23681afe 391e7b90bf3f0bfeb2c2602cc65aa6be4dd1c01374b89c4a48425f2d22fe231c c3ab58b3154e5f5101ba74fccfd27a9ab445e41262cdf47e8cc3be7416a5904f ccb1209122085bed5bded3f923835a65d3cc1071f7e4ad52bc5cf42057dd2150 bc4513e1ea20e11d00cfc6ce899836e4f18e4b5f5beee52e0ea9942adb78fc70

PoisonIvyGroupandtheCyberespionageCampaignAgainstChineseMilitaryandGoverment-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
PoisonIvyGroupandtheCyberespionageCampaignAgainstChineseMilitaryandGoverment-360CoreSecurity.pdf (Click name to open as page)	ps1688.webhop.org dns.net ssy.ikwb.com moneyaaa.beijingdasihei.com kav2011.mooo.com teacat.https443.org javainfo.upgrinfo.com xinhua.redirectme.net blogs.360.cn aliago.dyndns.dk pouhui.diskstation.org babana.wikaba.com mailsends.sendsmtp.com news.xinhuanet.com check.blogdns.com soagov.zapto.org china.serveblog.net www.safe360.dns05.com jerry.jkub.com 126mailserver.serveftp.com svcsrset.ezua.com comehigh.mefound.com zhqopin.mynumber.org waterfall.mynumber.org safe360.dns05.com tong.wikaba.com office.go.dyndns.org rising.linkpc.net wwwdo.tyur.acmetoy.com gaewaa.upgrinfo.com mp3.dnset.com www.ssy.ikwb.com uswebmail163.sendsmtp.com backaaa.beijingdasihei.com soasoa.sytes.net bearingonly.rebatesrule.net zxcv201789.dynssl.com givemea.ygto.com updates.lflink.com jason.zyns.com goldlion.mefound.com ssy.mynumber.org gugupd.008.net chinamil.lflink.com mail.sends.sendsmtp.com as1688.webhop.org soagov.sytes.net kouwel.zapto.org pps.longmusic.com annie165.zyns.com netlink.vizvaz.com www.tong.wikaba.com givemeaaa.upgrinfo.com auth.kanbox.com fevupdate.ocry.com canberk.gecekodu.com officepatch.dnset.com l63service.serveuser.com hyssjc.securitytactics.com cluster.safe360.dns05.com geiwoaaa.qpoe.com webupdate.dnsrd.com access.webplurk.com www.service.justdied.com gaewaaa.upgrinfo.com usa08.serveftp.net mediatvset.no microsoftword.serveuser.com ip.org bt0116.servebbs.net laizaow.mefound.com updateinfo.servegame.org localhosts.ddns.us motices.ourhobby.com music.net wmiaprp.ezua.com emailser163.serveusers.com operater.solaris.nu mail163.mypop3.net guliu2008.9966.org sandy.ourhobby.com ceepitbj.servepics.com	131.213.66.10 165.227.220.223 45.76.228.61 188.166.67.36 146.0.32.168 45.32.8.137 45.76.125.176	27f683baed7b02927a591cdc0c850743 0e80fca91103fe46766dcb0763c6f6af 2a96042e605146ead06b2ee4835baec3 5e4c2fbcd0308a0b9af92bf87383604f a8417d19c5e5183d45a38a2abf48e43e b244cced7c7f728bcc4d363f8260090d 3e12538b6eaf19ca163a47ea599cfa9b 26d7f7aa3135e99581119f40986a8ac3 1ab54f5f0b847a1aaaf00237d3a9f0ba 4e57987d0897878eb2241f9d52303713 9f9a24b063018613f7f290cc057b8c40 76782ecf9684595dbf86e5e37ba95cc8 f27a9cd7df897cf8d2e540b6530dceb3 2c405d608b600655196a4aa13bdb3790 ec7e11cfca01af40f4d96cbbacb41fed 5696bbee662d75f9be0e8a9ed8672755 2579b715ea1b76a1979c415b139fdee7 fccb13c00df25d074a78f1eeeb04a0e7 e07ca9f773bd772a41a6698c6fd6e551 d12099237026ae7475c24b3dfb5d18bc 3484302809ac3df6ceec857cb4f75fb1 28e4545e9944eb53897ee9acf67b1969 250c9ec3e77d1c6d999ce782c69fc21b 7639ed0f0c0f5ac48ec9a548a82e2f50 1aca8cd40d9b84cab225d333b09f9ba5 bfb9d13daf5a4232e5e45875e7e905d7 168365197031ffcdbe65ab13d71b64ec 36c23c569205d6586984a2f6f8c3a39e 5f1a1ff9f272539904e25d300f2bfbcc dde2c03d6168089affdca3b5ec41f661 ae004a5d4f1829594d830956c55d6ae4 c8755d732be4dc13eecd8e4c49cfab94 7c498b7ad4c12c38b1f4eb12044a9def ca663597299b1cecaf57c14c6579b23b f1b6ed2624583c913392dcd7e3ea6ae1 95f0b0e942081b4952e6daef2e373967 41c7e09170037fafe95bb691df021a20 30866adc2976704bca0f051b5474a1ee a73d3f749e42e2b614f89c4b3ce97fe1 f0c29f89ffdb0f3f03e663ef415b9e4e e9a9c0485ee3e32e7db79247fee8bba6 f29abd84d6cdec8bb5ce8d51e85ddafc c8fd2748a82e336f934963a79313aaa1 81232f4c5c7810939b3486fa78d666c2 bd4b579f889bbe681b9d3ab11768ca07 a807486cfe05b30a43c109fdb6a95993 07561810d818905851ce6ab2c1152871 fb427874a13f6ea5e0fd1a0aec6a095c eff88ecf0c3e719f584371e9150061d2 1396cafb08ca09fac5d4bd2f12c65059 e2e2cd911e099b005e0b2a80a34cfaac d61c583eba31f2670ae688af070c87fc cda1961d63aaee991ff97845705e08b8 bd2272535c655aff1f1566b24a70ee97 adc3a4dfbdfe7640153ed0ea1c3cf125 611cefaee48c5f096fb644073247621c 67d5f04fb0e00addc4085457f40900a2 8abb22771fd3ca34d6def30ba5c5081c 382132e601d7a4ae39a4e7d89457597f 6ca3a598492152eb08e36819ee56ab83 9b925250786571058dae5a7cbea71d28 b301cd0e42803b0373438e9d4ca01421 b0be3c5fe298fb2b894394e808d5ffaf 45e983ae2fca8dacfdebe1b1277102c9 aa57085e5544d923f576e9f86adf9dc0 accb53eb0faebfca9f190815d143e04b 0fb92524625fffda3425d08c94c014a1 7deeb1b3cce6528add4f9489ce1ec5d6 81e1332d15b29e8a19d0e97459d0a1de 1374e999e1cda9e406c19dfe99830ffc c31549489bf0478ab4c367c563916ada 6a37ce66d3003ebf04d249ab049acb22 2b5ddabf1c6fd8670137cade8b60a034 5ee2958b130f9cda8f5f3fc1dc5249cf f3ed0632cadd2d6beffb9d33db4188ed 31c81459c10d3f001d2ccef830239c16 9bcb41da619c289fcfdf3131bbf2be21 517c81b6d05bf285d095e0fd91cb6f03 1dc61f30feeb60995174692e8d864312 03d762794a6fe96458d8228bb7561629 785b24a55dd41c94060efe8b39dc6d4c acc598bf20fada204b5cfd4c3344f98a 0595f5005f237967dcfda517b26497d6 fbd0f2c62b14b576f087e92f60e7d132

ShamoonReturnstoWipeSystemsinMiddleEast,Europe_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ShamoonReturnstoWipeSystemsinMiddleEast,Europe_McAfeeBlogs.pdf (Click name to open as page)	key8854321.pub	N/A	bf3e0bc893859563811e9a481fde84fe7ecd0684 10411f07640edcaa6104f078af09e2543aa0ca07 df177772518a8fcedbbc805ceed8daecc0f42fed 41f8cd9ac3fb6b1771177e5770537518 43ed9c1309d8bb14bd62b016a5c34a2adbe45943

OceanLotus_NewwateringholeattackinSoutheastAsia.pdf

Report name	Domains	Hosts	Samples
OceanLotus_NewwateringholeattackinSoutheastAsia.pdf (Click name to open as page)	arabica.podzone.net toithichdoc.blogspot.com static.tagscdn.com figbc.knowsitall.info ip.getmyip.com ichefbcci.is blogs.360.cn www.volexity.com chef.com cdnscr.thruhere.net cdn1.shacknet.us tinkhongle.com sskimresources.com fvpoc.org likescandy.com www.mfaic.gov.kh url.com gui.dnsdojo.net trc.webhop.net nguoitieudung.com.vn getbootstrap.com daichungvienvinhthanh.com www.alexa.com metacachecdn.com www.welivesecurity.com mfaic.gov.kh tiqqcdn.com wfpscripts.homeunix.com baotgm.net html5.endofinternet.net 2mdn.net mtgvinh.net conggiaovietnam.net wp.com thongtinchongphandong.com weblink.selfip.info renew.webhop.info adroll.com actor.com tiwimg.com danviet.vn widgets.wp.com danchimviet.info utagscript.com lcontacts.servebbs.net trieudaiviet.com cdnazure.co stat.com danviethouston.com raovatcalitoday.com cnrp7.org cnevids.com phnompenhpost.com tynt.co cdn.blogdns.net lienketqnhn.org ampproject.com pixel1.dnsalias.net mod.gov.kh skimresources.com gardencityclub.com tcog.thruhere.net cdn.ampproject.com	159.65.128.57 128.199.159.127 178.128.90.182 178.128.98.139 159.65.137.144 178.128.90.223 142.93.127.120 178.128.28.89 142.93.116.157 159.65.7.45 178.128.28.93	2194271c7991d60ae82436129d7f25c0a689050a a612cdb028e1571dcab18e4aa316da26 996d0ac930d2cdb16ef96edc27d9d1afc2d89ca8

TritonMalwareSpearheadsLatestGenerationofAttacksonIndustrialSystems_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
TritonMalwareSpearheadsLatestGenerationofAttacksonIndustrialSystems_McAfeeBlogs.pdf (Click name to open as page)	www.midnightbluelabs.com cyberx-labs.com vimeo.com blog.talosintelligence.com www.nozominetworks.com blog.schneider-electric.com reeye.com	N/A	dc81f383624955e0c0441734f9f1dabfe03f373c 6c09fec42e77054ee558ec352a7cd7bd5c5ba1b0 2262362200aa28b0eead1348cb6fda3b6c83ae01 f403292f6cb315c84f84f6c51490e2e8cd03c686 d6e997a4b6a54d1aeedb646731f3b0893aee4b82 b47ad4840089247b058121e95732beb82e6311d0 66d39af5d61507cf7ea29e4b213f8d7dc9598bed 1dd89871c4f8eca7a42642bf4c5ec2aa7688fd5c a6357a8792e68b05690a9736bc3051cba4b43227

Shamoon3_ModifiedOpen-SourceWiperContainsVersefromtheQuran-Unit42.pdf

Report name	Domains	Hosts	Samples
Shamoon3_ModifiedOpen-SourceWiperContainsVersefromtheQuran-Unit42.pdf (Click name to open as page)	N/A	N/A	c3ab58b3154e5f5101ba74fccfd27a9ab445e41262cdf47e8cc3be7416a5904f 35ceb84403efa728950d2cc8acb571c61d3a90decaf8b1f2979eaf13811c146b 391e7b90bf3f0bfeb2c2602cc65aa6be4dd1c01374b89c4a48425f2d22fe231c e5bf756d5530ec38ff649b901b3c7506f8556821d979bdcb392237f2ff40daf8 5257f623270b4c5cc471ff35b1bfeec80ab37c7e012da76b50ebd2c4911a43d0 5203628a89e0a7d9f27757b347118250f5aa6d0685d156e375b6945c8c05eb8a 0694bdf9f08e4f4a09d13b7b5a68c0148ceb3fcc79442f4db2aa19dd23681afe d9e52663715902e9ec51a7dd2fea5241c9714976e9541c02df66d1a42a3a7d2a 0266be9130bdf20976fc5490f9191edaafdae09ebe45e74cd97792412454bf0d

ShamoonAttackersEmployNewToolKittoWipeInfectedSystems_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ShamoonAttackersEmployNewToolKittoWipeInfectedSystems_McAfeeBlogs.pdf (Click name to open as page)	mynetwork.ddns.net possibletarget.ddns.com	N/A	2abc567b505d0678954603dcb13c438b8f44092cfe3f15713148ca459d41c63f 5203628a89e0a7d9f27757b347118250f5aa6d0685d156e375b6945c8c05eb8a d9e52663715902e9ec51a7dd2fea5241c9714976e9541c02df66d1a42a3a7d2a 35ceb84403efa728950d2cc8acb571c61d3a90decaf8b1f2979eaf13811c146b

rp-operation-sharpshooter.pdf

Report name	Domains	Hosts	Samples
rp-operation-sharpshooter.pdf (Click name to open as page)	kingkoil.com.sg www.kingkoil.com.sg	34.214.99.20 137.74.41.56	f3bd9e1c01f2145eb475a98c87f94a25 9b0f22e129c73ce4c21be4122182f6dcbc351c95 668b0df94c6d12ae86711ce24ce79dbe0ee2d463 73471f41319468ab207b8d5b33b0b4be 31e79093d452426247a56ca0eff860b0ecc86009 8106a30bd35526bded384627d8eebce15da35d17 66776c50bcc79bbcecdbe99960e6ee39c8a31181

apt-c-01-new-vulnerability-360.pdf

Report name	Domains	Hosts	Samples
apt-c-01-new-vulnerability-360.pdf (Click name to open as page)	ti.360.net	N/A	N/A

Area-1-Security-PhishingDiplomacy.pdf

Report name	Domains	Hosts	Samples
Area-1-Security-PhishingDiplomacy.pdf (Click name to open as page)	205408245657-eg0r569euk8qef5nkab52b01cl5i3nn5.apps.googleusercontent.com updates.organiccrap.com hq.aflcio.org stc.un.org unhq.un.org un.org ptc.un.org www.belfercenter.org www.sync-components.com pbf.un.org www.cfr.org www.area1security.com	N/A	ccfa460974d270e26688de917811cc483035e09e d6e884fb2021f7852a68b84ddedd7e3764f4f1d7 c1c80e237f6fbc2c61b82c3325dd836f3849ca036a28007617e4e27ba2f16c4b 1d8f21039c629d08c65e9766691483fd 2ca739538e18ce6f881694d99f6e22e9 b65c57a380a1df69e61462e814575bf93a8ea5772621c1f19ccfff5bdd6a3e8f dce0f3d5a537b722efaa0f4f6f817e1b5b97248b 232c85f65de1ef2cab812f01f3761d49 cba2271cc819101718a9460886ae47c2 46836a597b3213683986d68c2a7df6027fd4e1f1 88222c4fe9b9af8300b135229ad7b3303c299aab ed8b0b999b516b2488991f763894199e7a1447d7

APT-C-01-360.pdf

Report name	Domains	Hosts	Samples
APT-C-01-360.pdf (Click name to open as page)	l63service.serveuser.com ps1688.webhop.org dns05.com aliago.dyndns.dk wmiaprp.ezua.com mailsends.sendsmtp.com dnset.com ti.360.net xinhua.redirectme.net office.go.dyndns.org api-upload.kanbox.com www.ssy.ikwb.com backaaa.beijingdasihei.com hy-zhqopin.mynumber.org bearingonly.rebatesrule.net zxcv201789.dynssl.com pouhui.diskstation.org chinamil.lflink.com annie165.zyns.com netlink.vizvaz.com www.tong.wikaba.com fevupdate.ocry.com officepatch.dnset.com cluster.safe360.dns05.com access.webplurk.com operater.solaris.nu teacat.https443.org javainfo.upgrinfo.com www.service.justdied.com check.blogdns.com tong.wikaba.com soasoa.sytes.net waterfall.mynumber.org www.chinamil.com jason.zyns.com gugupd.008.net pps.longmusic.com uswebmail163.sendsmtp.com gaewaa.upgrinfo.com emailser163.serveusers.com guliu2008.9966.org bt0116.servebbs.net updateinfo.servegame.org www.virusbulletin.com www.chinamil.cn moneyaaa.beijingdasihei.com news.xinhuanet.com soagov.zapto.org jerry.jkub.com rising.linkpc.net winsysupdate.dynamic-dns.net givemea.ygto.com updates.lflink.com ssy.mynumber.org www.soa.gov.cn as1688.webhop.org kouwel.zapto.org ssy.ikwb.com canberk.gecekodu.com geiwoaaa.qpoe.com comehigh.mefound.com localhosts.ddns.us ceepitbj.servepics.com cnwww.m-music.net mediatvset.no-ip.org webupdate.dnsrd.com wwwdo.tyur.acmetoy.com babana.wikaba.com sandy.ourhobby.com kav2011.mooo.com china.serveblog.net mp3.dnset.com hyssjc.securitytactics.com 126mailserver.serveftp.com usa08.serveftp.net goldlion.mefound.com mail.sends.sendsmtp.com soagov.sytes.net www.xinhuanet.com givemeaaa.upgrinfo.com auth.kanbox.com microsoftword.serveuser.com svcsrset.ezua.com laizaow.mefound.com motices.ourhobby.com mail163.mypop3.net www.safe360.dns05.com fff.dynamic-dns.net	131.213.66.10 165.227.220.223 45.76.228.61 188.166.67.36 146.0.32.168 45.32.8.137 45.76.125.176	67d5f04fb0e00addc4085457f40900a2 19f967e27e21802fe92bc9705ae0a770 6f8ad451646c9eda1f75c5d31f39f668 5d0b4cadfb149695d9fbc71dd1b36bef da807804fa5f53f7cbcaac82b901689c

ESET_OceanLotus.pdf

Report name	Domains	Hosts	Samples
ESET_OceanLotus.pdf (Click name to open as page)	eighrimeau.com virginiaar.com avidilleneu.com orrislark.com lbertussbau.com urnage.com jamyer.com omasicase.com loridanase.com anessallie.com tephens.com aulolloy.com iecopeland.com braydenhateaub.com dwarduong.com ucairtz.com stopherau.com erstin.com jeffreyue.com antenham.com niggmhggmeggmkggmfggmdggidggngggmjgg.ijhlokga.aisicoin.com jamedalue.com orresto.com nasahlaes.com hristophe.com icmannaws.com sanauer.com chascloud.com hieryells.com ntjeilliams.com arkoimmerma.com irkaimboeuf.com jeanessbinder.com myolton.com ucaargo.com avidsontre.com eckenbaue.com tefanie.com rackerasr.com keoucha.com frahreiner.com alicervois.com dreyoddu.com marrmann.com aximilian.com arinaurna.com errellawle.com onnaha.com adineohler.com niggmhggmeggmkggmfggmdggidggngggmjgg.ijhlokga.dwarduong.com traveroyce.com biasatts.com orinneamoure.com tsworthoa.com tefanortin.com rcuselynac.com venionne.com aisicoin.com carosseda.com moureuxacv.com laudiaouc.com meroque.com onteagle.com ichardt.com	198.50.191.194 198.50.191.195 74.121.190.150 149.56.180.243 164.132.45.67 46.183.222.83 46.183.222.82 198.50.234.96 46.183.222.84 84.38.132.226 84.38.132.227 79.143.87.230 79.143.87.233 46.183.220.82 46.183.220.81 158.69.100.199 74.121.190.130 198.50.234.111	2a387d7d47a63d6e47d9cc92d3dc69a53816c2c0 5689448b4b6260ec9c35f129df8b8f2622c66a45 7105caa6d4fd8a2c67523d385277528e556ae4f6 a40ee8ff313e59aa92d48592c494a4c3d81449af 032ef58b7978d079287874044dc516af624ae5f5 fdcb35cd9cb8dc1474cbcdf1c9bb03200dcf3f18 2616da1697f7c764ee7fb558887a6a3279861fac 202fb56edb2fb542e05c845d62ffbdcfbebed9ec 82e579bd49d69845133c9aa8585f8bd26736437b 912895e6bb9e05af3a1e58a1da417e992a71a324 fe0161fb8a26a0bf4afad746c7ebf89499dcd3a7 c2eb1033bc01ab0fd732a7ba4967be02c0690bf0 f96bcd875836da89800912de1e557891697c7cf4 d35695f2366a43628231e73ffa83ca106306a8fa

UpdateonPawnStorm-NewTargetsandPoliticallyMotivatedCampaigns_Trend_Micro.pdf

Report name	Domains	Hosts	Samples
UpdateonPawnStorm-NewTargetsandPoliticallyMotivatedCampaigns_Trend_Micro.pdf (Click name to open as page)	adfs-senate.services fil-luge.com mail-ibu.eu chmail.ir adfs-senate.email fisski.ca iihf.eu adfs.senate.qov.info biathlovvorld.com chmail.ir.udelivered.tk webmail-ibsf.org	N/A	N/A

MaliciousDocumentTargetsPyeongchangOlympics_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
MaliciousDocumentTargetsPyeongchangOlympics_McAfeeBlogs.pdf (Click name to open as page)	sg.stickyadstv.com mafra.go.kr.jeojang.ga rst.cz nctc.go.kr pyeongchang2018.com jeojang.ga	200.122.181.63 43.249.39.152	c388b693d10e2b84af52ab2c29eb9328e47c3c16 8ad0a56e3db1e2cd730031bdcae2dbba3f7aba9c

Cisco'sTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf (Click name to open as page)	www.1588-2040.co.kr www.dylboiler.co.kr www.korea-tax.info	N/A	3b1395f620e428c5f68c6497a2338da0c4f749feb64e8f12e4c5b1288cc57a1c fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0

ComnieContinuestoTargetOrganizationsinEastAsia_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
ComnieContinuestoTargetOrganizationsinEastAsia_PaloAltoNetworks.pdf (Click name to open as page)	www.dt.co.kr www.reddit.com itsmonsee.tumblr.com allworldnewsway.blogspot.com blogspot.com tumbler.com	121.126.211.94 113.196.70.11	316a0c6849f183a1a52d0c7648e722c4ca85bd57b0804a147c0c8656b84bbdb9 0e8a4e4d5ca501bad25a730fb5de534fa324c6ac23e0a573524693f2d996d105 e06b797a24fa03a77e0d5f11b0cf0f4f038e0a9ea04d4981d39148969349c79c c8951038fd53321661274e5a12532c3fb6f73c75fd75503a1089c56990658fef 7282d0709449abe16457864f58157cac8d007571dc5d463d393d1ae2605d17e0 29ed6eb3c882b018c2bb6bf2f8eb15069dc5510ca119abebf24f09e3c91f10aa 18ec68e1bd9b11f22e481d48c415f8d80edb76e9032ba4e1d31d87e16eed9959 48a1ce103e5bf47c47cc5ed40b2dc687ebaf3674d667419287bcb1d0b8d8dda6 bf6ee8426245b167a69292e513c0841d818b310dda87daea649221f4e0afd1b3 eed5945c36ba22a2531dd2d9dd7bc4e17e68544d512be75670919caf287c1b4a 62b98dde60cb4dd0d0088bde222c5c2c4c92560cccf4753f1ce94e044093ab85 639a49390c6f8597d36ec0bd245efa1b4a078c0506fb515e577a40389b39a614 8026442b812469e48ccd11611ab6eacdcb312a8f1aabd563b7f4cb4868315e16 756952652290ad09fe03c8674d44eab2077b091398187c3abcb6f1ddc462c32d

GoldDragonWidensOlympicsMalwareAttacks,GainsPermanentPresenceonVictims'Systems-McAfee.pdf

Report name	Domains	Hosts	Samples
GoldDragonWidensOlympicsMalwareAttacks,GainsPermanentPresenceonVictims'Systems-McAfee.pdf (Click name to open as page)	inkboom.co.kr byethost7.com www.golddragon.com nid-help-pchange.atwebpages.com ink.inkboom.co.kr 000webhostapp.com braveprince.com	223.194.70.136 200.200.200.13	35e5310b6183469f4995b7cd4f795da8459087a4 bf21667e4b48b8857020ba455531c9c4f2560740 3a0c617d17e7f819775e48f7edefe9af84a1446b 761b0690cd86fb472738b6dc32661ace5cf18893 11a38a9d23193d9582d02ab0eae767c3933066ec 06948ab527ae415f32ed4b0f0d70be4a86b364a5 96a2fda8f26018724c86b275fe9396e24b26ec9e 5e1326dd7122e2e2aed04ca4de180d16686853a7 bc6cb78e20cb20285149d55563f6fdcf4aaafa58 539acd9145befd7e670fe826c248766f46f0d041 6e13875449beb00884e07a38d0dd2a73afe38283 fef671c13039df24e1606d5fdc65c92fbc1578d9 389db34c3a37fd288e92463302629aa48be06e35 615447f458463dc77f7ae3b0a4ad20ca2303027a 71f337dc65459027f4ab26198270368f68d7ae77 7e74f034d8aa4570bd1b7dcfcdfaa52c9a139361 465d48ae849bbd6505263f3323e818ccb501ba88 a9eb9a1734bb84bbc60df38d4a1e02a870962857 4f58e6a7a04be2b2ecbcdcbae6f281778fdbd9f9

Cisco'sTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf (Click name to open as page)	N/A	N/A	19ab44a1343db19741b0e0b06bacce55990b6c8f789815daaf3476e0cc30ebea 3337e3875b05e0bfba69ab926532e3f179e8cfbf162ebb60ce58a0281437a7ef f188abc33d351c2254d794b525c5a8b79ea78acd3050cd8d27d3ecfc568c2936 ae9a4e244a9b3c77d489dee8aeaf35a7c3ba31b210e76d81ef2e91790f052c85 a7d6dcdf5ca2c426cc6c447cff76834d97bc1fdff2cd14bad0b7c2817408c334 d934cb8d0eadb93f8a57a9b8853c5db218d5db78c16a35f374e413884d915016 ab5bf79274b6583a00be203256a4eacfa30a37bc889b5493da9456e2d5885c7f 3e27b6b287f0b9f7e85bfe18901d961110ae969d58b44af15b1d75be749022c2 28858cc6e05225f7d156d1c6a21ed11188777fa0a752cb7b56038d79a88627cc edb1ff2521fb4bf748111f92786d260d40407a2e8463dcd24bb09f908ee13eb9

OopsIE!OilRigusesThreeDollarstoDeliverNewTrojan.pdf

Report name	Domains	Hosts	Samples
OopsIE!OilRigusesThreeDollarstoDeliverNewTrojan.pdf (Click name to open as page)	msoffice-cdn.com office365-technical.info pan-unit42.github.io www.reddit.com management.com msoffice365cdn.com mail.ru www.msoffice365cdn.com office365-management.com technical.info	80.82.79.221 80.82.79.240 185.162.235.29	81eb43ad46ed39bd4b869c709e5e468a6fc714485da288aaa77c80291ce6db8c ec3f55cac3e8257d6d48e5d543db758fed7d267f14f63a6a5d98ba7a0fab6870 9a040cdd7c9fcde337b2c3daa2a7208e225735747dd1366e6c0fcbc56815a07f 231115a614c99e8ddade4cf4c88472bd3801c5c289595fc068e51b77c2c8563f

Chafer_LatestAttacksRevealHeightenedAmbitions_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
Chafer_LatestAttacksRevealHeightenedAmbitions_SymantecBlogs.pdf (Click name to open as page)	symc.ly s224.win7-update.com s5060.win7-update.com wsus65432.win7-update.com win7-updates.com s21.win7-update.com	134.119.217.84 91.218.114.225 94.100.21.213 89.38.97.112 185.22.172.40 148.251.197.113 83.142.230.113 89.38.97.115	N/A

SofacyAttacksMultipleGovernmentEntities_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
SofacyAttacksMultipleGovernmentEntities_PaloAltoNetworks.pdf (Click name to open as page)	hotfixmsupload.com www.janes.com www.reddit.com www.shellntel.com isc.sans.edu pan-unit42.github.io noticeofpleadings.com cdnverify.net www.welivesecurity.com ihsmarkit.com attack.mitre.org	N/A	ff808d0a12676bfac88fd26f955154f8884f2bb7c534b9936510fd6296c543e8 23411bb30042c9357ac4928dc6fca6955390361e660fec7ac238bbdcc8b83701 12e6642cf6413bdf5388bee663080fa299591b2ba023d069286f3be9647547c8 cb85072e6ca66a29cb0b73659a0fe5ba2456d9ba0b52e3a4c89e86549bc6e2c7

PatchworkContinuestoDeliverBADNEWStotheIndianSubcontinent_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
PatchworkContinuestoDeliverBADNEWStotheIndianSubcontinent_PaloAltoNetworks.pdf (Click name to open as page)	s3-us-west-2.amazonaws.com www.forcepoint.com www.webrss.com www.reddit.com pwc.blogs.com feed43.com attack.mitre.org feeds.rapidfeeds.com	N/A	e3e7e71a0b28b5e96cc492e636722f73 dd1876848203d9e10abceec07282ff37 b8abf94017b159f8c1f0746dca24b4eeaf7e27d2ffa83ca053a87deb7560a571 d486ed118a425d902044fb7a84267e92b49169c24051ee9de41327ee5e6ac7c2 290ac98de80154705794e96d0c6d657c948b7dff7abf25ea817585e4c923adb2 07d5509988b1aa6f8d5203bc4b75e6d7be6acf5055831cc961a51d3e921f96bd a67220bcf289af6a99a9760c05d197d09502c2119f62762f78523aa7cbc96ef1 ab4f86a3144642346a3a40e500ace71badc06a962758522ca13801b40e9e7f4a fd8394b2ff9cd00380dc2b5a870e15183f1dc3bd82ca6ee58f055b44074c7fd4 79ad2084b057847ce2ec2e48fda64073

Cisco'sTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf (Click name to open as page)	N/A	N/A	ae086350239380f56470c19d6a200f7d251c7422c7bc5ce74730ee8bab8e6283 23e5bb2369080a47df8284e666cac7cafc207f3472474a9149f88c1a4fd7a9b0 5b7c970fee7ebe08d50665f278d47d0e34c04acc19a91838de6a3fc63a8e5630

ReaperGroup’sUpdatedMobileArsenal_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
ReaperGroup’sUpdatedMobileArsenal_PaloAltoNetworks.pdf (Click name to open as page)	blog.talosintelligence.com www.reddit.com blog.alyac.co.kr cgalim.com hakproperty.com	N/A	990d278761f87274a427b348f09475f5da4f924aa80023bf8d2320d981fb3209 0de087ffb95c88a65e83bd99631d73d0176220e8b740785de78d2d79294f2303 06222141a684de8a0b6e5dc1f7a2b14603c98dbe404ad7605dc9eb9d903c3df8 d29895aa3f515ec9e345b05882ee02033f75745b15348030803f82372e83277a 28c69801929f0472cef346880a295cdf4956023cd3d72a1b6e72238f5b033aca 86887ce368d9a3e7fdf9aa62418cd68daeea62269d17afb059ab64201047e378 d5de09cc5d395919d2d2000f79326a6997f4ec079879b11b05c4d1a1a847ed00 f33aedfe5ebc918f5489e1f8a9fe19b160f112726e7ac2687e429695723bca6a 6b1f2dfe805fa0e27139c5a4840042599262dbbf4511a118d3fba3d4ec35f2d7 679d6ad1dd6d1078300e24cf5dbd17efea1141b0a619ff08b6cc8ff94cfbb27e

JPCERT_CCBlog_MalwareTSCookie_JP-CERT.pdf

Report name	Domains	Hosts	Samples
JPCERT_CCBlog_MalwareTSCookie_JP-CERT.pdf (Click name to open as page)	gethappy.effers.com savecars.dnset.com lang.suroot.com eoffice.etowns.org langlang.dnset.com carcolors.effers.com fatgirls.fatdiary.org epayplus.flnet.org appinfo.fairuse.org okinawas.ssl443.org iawntsilk.dnset.com apk36501.flnet.org ktyguxs.dnset.com office.dns04.com edu.microsoftmse.com longdays.csproject.org inewdays.csproject.org sslmaker.ssl443.org ntp.ukrootns1.com twnicsi.ignorelist.com jpcerts.jpcertinfo.com splashed.effers.com newtowns.flnet.org twcertcc.jumpingcrab.com lookatinfo.dnset.com hatena.ne.jp jpcert.or.jp jpcert.ignorelist.com	60.244.52.29 220.130.216.76	e451a1e05c0cc363a185a98819cd2af421ac87154702bf72007ecc0134c7f417 1fa7cbe57eedea0ebc8eb37b91e7536c07be7da7775a6c01e5b14489387b9ca8 6b66c6d8859dfe06c0415be4df2bd836561d5a6eabce98ddd2ee54e89e37fd44 39d7d764405b9c613dff6da4909d9bc46620beee7a7913c4666acf9e76a171e4 06a9c71342eeb14b7e8871f77524e8acc7b86670411b854fa7f6f57c918ffd2b 12b0f1337bda78f8a7963d2744668854d81e1f1b64790b74d486281bc54e6647 afe780ba2af6c86babf2d0270156da61f556c493259d4ca54c67665c17b02023 17f1996ad7e602bd2a7e9524d7d70ee8588dac51469b08017df9aaaca09d8dd9 6d2f5675630d0dae65a796ac624fb90f42f35fbe5dec2ec8f4adce5ebfaabf75 203c924cd274d052e8e95246d31bd168f3d8a0700a774c98eff882c8b8399a2f f16befd79b7f8ffdaf934ef337a91a5f1dc6da54c4b2bee5fe7a0eb38e8af39e 201bf3cd2a723d6c728d18a9e41ff038549eac8406f453c5197a1a7b45998673 2bd13d63797864a70b775bd1994016f5052dc8fd1fd83ce1c13234b5d304330d 96306202b0c4495cf93e805e9185ea6f2626650d6132a98a8f097f8c6a424a33 0debbcc297cb8f9b81c8c217e748122243562357297b63749c3847af3b7fd646 1da9b4a84041b8c72dad9626db822486ce47b9a3ab6b36c41b0637cd1f6444d6 5443ee54a532846da3182630e2bb031f54825025700bcd5f0e34802e7345c7b2 35f966187098ac42684361b2a93b0cee5e2762a0d1e13b8d366a18bccf4f5a91 0683437aebd980c395a83e837a6056df1a21e137e875f234d1ed9f9a91dfdc7f 20f7f367f9cb8beca7ce1ba980fafa870863245f27fea48b971859a8cb47eb09 cdf0e4c415eb55bccb43a650e330348b63bc3cbb53f71a215c44ede939b4b830 4a8237f9ecdad3b51ffd00d769e23f61f1e791f998d1959ad9b61d53ea306c09

WateringHoleAttackonLeadingHongKongTelecomSiteExploitingFlashFlawCVE-2018-4878_Morphisec.pdf

Report name	Domains	Hosts	Samples
WateringHoleAttackonLeadingHongKongTelecomSiteExploitingFlashFlawCVE-2018-4878_Morphisec.pdf (Click name to open as page)	li715-241.members.linode.com	N/A	58d15b7a49193022d8fb9712fac1a9e2

Cisco'sTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf (Click name to open as page)	fox.foxlove.life jo.foxlove.life le.pro eg.foxlove.life ce-update.services ipify.org smyip.com foxlive.life	N/A	c5bfb5118a999d21e9f445ad6ccb08eb71bc7bd4de9e88a41be9cf732156c525 76a9b603f1f901020f65358f1cbf94c1a427d9019f004a99aa8bff1dea01a881 4b03bea6817f0d5060a1beb8f6ec2297dc4358199d4d203ba18ddfcca9520b48 15f5aaa71bfa3d62fd558a3e88dd5ba26f7638bf2ac653b8d6b8d54dc7e5926b e66af059f37bdd35056d1bb6a1ba3695fc5ce333dc96b5a7d7cc9167e32571c5 d49e9fdfdce1e93615c406ae13ac5f6f68fb7e321ed4f275f328ac8146dd0fc1 1176642841762b3bc1f401a5987dc55ae4b007367e98740188468642ffbd474e af7a4f04435f9b6ba3d8905e4e67cfa19ec5c3c32e9d35937ec0546cce2dd1ff 88e4f306f126ce4f2cd7941cb5d8fcd41bf7d6a54cf01b4a6a4057ed4810d2b6

OperationParliament,whoisdoingwhat_-Securelist.pdf

Report name	Domains	Hosts	Samples
OperationParliament,whoisdoingwhat_-Securelist.pdf (Click name to open as page)	N/A	N/A	N/A

APT15isaliveandstrong_AnanalysisofRoyalCliandRoyalDNS.pdf

Report name	Domains	Hosts	Samples
APT15isaliveandstrong_AnanalysisofRoyalCliandRoyalDNS.pdf (Click name to open as page)	www.nccgroup.trust linodepower.com andspurs.com wikaba.org dnsapp.info zipcodeterm.com log.autocount.org ridingduck.com cavanic9.net	N/A	6ea9cc475d41ca07fa206eb84b10cf2bbd2392366890de5ae67241afa2f4269f 750d9eecd533f89b8aa13aeab173a1cf813b021b6824bc30e60f5db6fa7b950b 6df9b712ff56009810c4000a0ad47e41b7a6183b69416251e060b5c80cd05785 bc937f6e958b339f6925023bc2af375d669084e9551fd3753e501ef26e36b39d 16b868d1bef6be39f69b4e976595e7bd46b6c0595cf6bc482229dbb9e64f1bce

Cisco'sTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf (Click name to open as page)	daum.net blog.talosintelligence.com artndesign2.cafe24.com mailacounts.com	N/A	e0257d187be69b9bee0a731437bf050d56d213b50a6fd29dd6664e7969f286ef 4f06eaed3dd67ce31e7c8258741cf727964bd271c3590ded828ad7ba8d04ee57 e5f191531bc1c674ea74f8885449f4d934d5f1aa7fd3aaa283fe70f9402b9574

ASongofIntelandFancy_ExploitingFancyBear’suseofSSLcertificate.pdf

Report name	Domains	Hosts	Samples
ASongofIntelandFancy_ExploitingFancyBear’suseofSSLcertificate.pdf (Click name to open as page)	fastphotobucket.com 1-you.njalla.no mdcrewonline.com ns1.nemohosts.com dowssys.com nanetsdeb.com akamaisoftupdate.com www.censys.io sapo.pt joshel.com myinvestgroup.co ns1.bulletdns.net vermasterss.com dns.com space-delivery.com mvsband.com cdnverify.net ns1.ipstates.net openmailbox.org lowprt.org dvsservice.net microsoftdccenter.com funnymems.com rndversion.net acrobatportable.com travelbern.com europehistoricalmuseum.com wmdmediacodecs.com 1a7ea920.bitcoin-dns.hosting adobeupdatetechnology.com applecloudupdate.com remsupport.org engineer.com www.farsightsecurity.com nomartung.org remail.cc microsoftstoreservice.com ns1.njal.la appservicegroup.com globaltechresearch.org centrum.cz acrobatportable.co webversionact.org cock.li akamaitechupdate.com reportscanprotecting.org satellitedeluxpanorama.com lgemon.org europe.com www.proofpoint.com apptaskserver.com wsusconnect.com mail.com dvsservice.com ppcodecs.com supservermgr.com leuploader.org noticermk.com post.com spelns.com mvtband.net ns1.ititch.com dateosx.com declan.je evbrax.org ecitcom.net ns1.carbon2u.com gmx.net webviewres.net myinvestgroup.com dowstem.com runvercheck.com gtranm.com viters.org	95.215.47.162 95.215.44.247 151.80.74.170 62.113.232.197 179.43.160.184 176.223.111.237 185.61.149.24 89.45.67.20 89.45.67.26 176.223.111.10 149.255.35.6 87.236.215.5 146.185.253.131 89.33.246.117 95.215.44.240 89.42.212.141 185.86.148.212 149.255.35.7 146.185.253.132 87.121.52.162 87.236.215.21 89.34.111.160 95.215.47.226 87.120.37.25 195.12.50.163 151.80.74.167 51.254.76.54 191.96.249.31 176.223.165.217 80.83.115.187 185.156.173.70 185.86.148.14 23.227.196.21 185.86.148.57 179.43.128.75 146.0.43.98 87.236.215.134 51.254.158.57 95.215.45.43 185.216.35.26	fcc696070de34157a02c46aa765c3c7969677fea 126e9d0cf80badf7810859fc116267d40ed1c58b 9baf76a0a3a4ce78d3c2ce04e64cae0ea604c7aa b86f517d347e53b3b7116682d7f36a3b77fa8bdf 9aa7508f1be201120511b1a4bc91e653c82df924 9d54194ba9140c148b8b3eb900dfb7b11ec155e2 f6ac5bd6aa52d96d8d413157fbfd1a6be7f65cb7 b64268d418592d481e13ed6aa4dc233b9dbd486d 0153d822178cd0f0725a9a1438d5b2a49edfe71a f65d9f8f385cf384cee24a6d04df600d575dd5f6 1e185ee8ac3c3eafcc2b4d842ed5711b9c62a305 d1a1d61806513cde9b2f8d817a55cc16384f490f 9d73605a130c377909fe463bc68ac83f73c04a46 010e271b2c860caba78475f02edcd30d7a896383 46330eac674b27a4f34ba6864a74bfef59998e5c 7d5eaecc2c6865a1f846d03b6d3e0b649a36c2c1 f9abac0f831e9ea43727a02810ebd6969e8e5951 edb4339cdfa0b43d8ef5fb49cc9fdcbbbf2208be 9153efa5001c67fdce4bb861f8758cd90b072901 b07d766664cfa183dba3ee32ab35ed32c7f501c2 bd4255444ba646796c16e967ec0aa1dd95a7a0f2 46ce0b05f302e0d855e9cc751100299345466581 551a8e0b504fa19e643dae39002bd0b91a5cfa7e 2e53a96a63c8cc17f2824bcdf7c93d64dad45170 8dc11f57d69a5583b196c28a9cf816e10a3fa327 c5ec8bb4bb5842930da935e13b9bee604e3b6182 c201e616fe90ae2592c34de03611748510aba143 ea8e4e7882a116ed43db4e5218efb2fd3ba2d116 d514a2a79a0e1a046846963797319fe8e00cdbeb 2a71f7ed0de7b89f4a10d329227898edcd3af6ce 739e8cc0519aeeb8dd1417e45f9577bd394684f0 6860d7aabef2f2382476d9a350c225956bf351c7 b99346a7f7809578330e4763329209c2381d2f95 62e1045ae816b5f44cb43ab52ecb8e4534b63147 ea3198f2ef8685a6f8a1303a55fdb7062a6f30b0 1f2a652a68f9ae6a241aed55d80597222d6c2b21 513587ce94be7d70b1f6661f22758ec6fd591d11

SofacyGroup’sParallelAttacks-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
SofacyGroup’sParallelAttacks-PaloAltoNetworksBlog.pdf (Click name to open as page)	supservermgr.com www.reddit.com er.com www.f2ko.de jobs.jobvite.com www.welivesecurity.com	185.25.50.93 1.6.3.8 220.158.216.127 185.25.51.198	d697160aecf152a81a89a6b5a7d9e1b8b5e121724038c676157ac72f20364edc 14331d289e737093994395d3fc412afc dd7e69e14c88972ac173132b90b3f4bfb2d1faec15cca256a256dd3a12b6e75d abbad7acd50754f096fdc6551e728aa6054dcf8e55946f90a02b17db552471ca cba5ab65a24be52214736bc1a5bc984953a9c15d0a3826d5b15e94036e5497df 5b5e80f63c04402d0b282e95e32155b2f86cf604a6837853ab467111d4ac15e2 25f0d1cbcc53d8cfd6d848e12895ce376fbbfaf279be591774b28f70852a4fd8 b6a75b1ef701710d7aeade0fe93de8477f3bd506 115fd8c619fa173622c7a1e84efdf6fed08a25d3ca3095404dcbd5ac3deb1f03 f27836430742c9e014e1b080d89c47e43db299c2e00d0c0801a2830b41b57bc1 85da72c7dbf5da543e10f3f806afd4ebf133f27b6af7859aded2c3a6eced2fd5 8cf3bc2bf36342e844e9c8108393562538a9af2a1011c80bb46416c0572c86ff

MirageFox_APT15ResurfacesWithNewToolsBasedOnOldOnes-Intezer.pdf

Report name	Domains	Hosts	Samples
MirageFox_APT15ResurfacesWithNewToolsBasedOnOldOnes-Intezer.pdf (Click name to open as page)	buy.healthcare-internet.com www.intezer.com analyze.intezer.com	N/A	c27fb5fd362fdaec2e344564f76197d01e1dc463ee3552b16452fc41e67f2709 cec9c4e48fad6e4c2b7cf4bc34d357893ef878e8be076c9f680f297e06184c20 f633df1fb42666f62eb23fd70dac4e3c0c4908af123f9335f3b58e6ea205df8a b9403fb1e3743617bcdf8c1e5dd332c325c1e1f2e79bef166261fec0091880cf

UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrick,Formbook,LokiBotandothermalware_Proofpoint.pdf

Report name	Domains	Hosts	Samples
UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrick,Formbook,LokiBotandothermalware_Proofpoint.pdf (Click name to open as page)	jabb3r.org ce.com xmpp.jp viruscheckmate.com test1.ru seliodrones.info scan4you.net www.proofpoint.com reaqta.com blog.0x3a.com cofense.com	N/A	c73c570208059e0a7b712d835c0de1def72d346a0d623508203b3061c63955ff 2bb9d0d8166a8d330cb3c5be6fb60539fe29e05cc3acb4ac7ec3da233fb013ec 53e8890f0d002d9611675419b3d8d0899b599c59f4557e105211d294bf92f023 877da1bc247c3a0406e29f1cbe50e89b6b53f070957b2d34d10a44fca66e6e49 094ec9e51a559f93e920643a1167de6ee966076af6ab89f24143e9e53b6f9e11 5528b7baa2be1b02140378b076efdbb413ea5e7b05541d2be438c6fb7a636dfe 030ce92b54ae176b116b6d1baa4769d0298f7283dcc1632f6184713e7ec8fdee 8e1c6f44b02e72b1c1c9af0ffdcee0fbe67fb8ee370bc67e4e01ec43f8b92ec9

NewinvestigationsintotheCCleanerincidentpointtoapossiblethirdstagethathadkeyloggercapacities.pdf

Report name	Domains	Hosts	Samples
NewinvestigationsintotheCCleanerincidentpointtoapossiblethirdstagethathadkeyloggercapacities.pdf (Click name to open as page)	blog.avast.com avast.com	N/A	N/A

MosquitocampaignbyTurlaundergoessignificantTTPsshift.pdf

Report name	Domains	Hosts	Samples
MosquitocampaignbyTurlaundergoessignificantTTPsshift.pdf (Click name to open as page)	www.welivesecurity.com security.com radare.today blog.ezua.com www.melani.admin.ch	70.32.39.219	994c8920180d0395c4b4eb6e7737961be6108f64 33d3b0ec31bfc16dcb1b1ff82550aa17fa4c07c5 114c1585f1ca2878a187f1ce7079154cc60db7f5

BisonalMalwareUsedinAttacksAgainstRussiaandSouthKorea-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
BisonalMalwareUsedinAttacksAgainstRussiaandSouthKorea-PaloAltoNetworksBlog.pdf (Click name to open as page)	rostec.ru homeip.com www.kcg.go.kr jennifer998.lookin.at www.reddit.com kted56erhg.dynssl.com camal.coseinc.com ng.tempors.com jobs.jobvite.com er.com www.rsaconference.com euiro8966.organiccrap.com boozallenmts.com games.my	116.193.155.38 196.44.49.154	dfa1ad6083aa06b82edfa672925bb78c16d4e8cb2510cbe18ea1cf598e7f2722 359835c4a9dbe2d95e483464659744409e877cb6f5d791daa33fd601a01376fc 43459f5117bee7b49f2cee7ce934471e01fb2aa2856f230943460e14e19183a6 b1da7e1963dc09c325ba3ea2442a54afea02929ec26477a1b120ae44368082f8 f431e0bed6b4b7ffef5e40b1b4b7078f2538f2b2db2869d831de5d7df26ee6cd 0641fe04713fbdad272a6f8e9b44631b7554dfd1e1332a8afa767d845a90b3fa 1128d10347dd602ecd3228faa389add11415bf6936e2328101311264547afa75 b2b764597d097fcb93c5b11cbd864ab1bcb894a2a1e2d2de1c469880f612431c

NewThreatActorGroupDarkHydrusTargetsMiddleEastGovernment-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewThreatActorGroupDarkHydrusTargetsMiddleEastGovernment-PaloAltoNetworksBlog.pdf (Click name to open as page)	ns103.kaspersky.host cisc0.net kaspersky.host 0utl00k.net www.reddit.com ns102.kaspersky.host owa365.bid er.com www.clearskysec.com msdncss.com kaspersky.science 0ffiice.com maccaffe.com 0utlook.bid hotmai1.com jobs.jobvite.com 0ffice.com micrrosoft.net allexa.net	195.154.41.150 94.130.88.9	ad3fd1571277c7ce93dfbd58cee3b3bec84eeaf6bb29a279ecb6a656028f771c a547a02eb4fcb8f446da9b50838503de0d46f9bb2fd197c9ff63021243ea6d88 ce84b3c7986e6a48ca3171e703e7083e769e9ced1bbdd7edf8f3eab7ce20fd00 cf9b2b40ac621aaf3241ff570bd7a238f6402102c29e4fbba3c5ce0cb8bc25f9 b5cfaac25d87a6e8ebabc918facce491788863f120371c9d00009d78b6a8c350 ff0b59f23630f4a854448b82f1f0cd66bc4b1124a3f49f0aecaca28309673cb0 cc1966eff7bed11c1faada0bb0ed0c8715404abd936cfa816cef61863a0c1dd6 36862f654c3356d2177b5d35a410c78ff9803d1d7d20da0b82e3d69d640e856e 9eac37a5c675cd1750cd50b01fc05085ce0092a19ba97026292a60b11b45bf49 99541ab28fc3328e25723607df4b0d9ea0a1af31b58e2da07eff9f15c4e6565c cec36e8ed65ac6f250c05b4a17c09f58bb80c19b73169aaf40fa15c8d3a9a6a1 776c056096f0e73898723c0807269bc299ae3bbd8e9542f0a1cbba0fd3470cb4 d393349a4ad00902e3d415b622cf27987a0170a786ca3a1f991a521bff645318 dd2625388bb2d2b02b6c10d4ee78f68a918b25ddd712a0862bcf92fa64284ffa 870c8b29be2b596cc2e33045ec48c80251e668abd736cef9c5449df16cf2d3b8 6dcb3492a45a08127f9816a1b9e195de2bb7e0731c4e7168392d0e8068adae7a 26e641a9149ff86759c317b57229f59ac48c5968846813cafb3c4e87c774e245 cf7863e023475d695c6f72c471d314b8b1781c6e9087ff4d70118b30205da5f0 0b1d5e17443f0896c959d22fa15dadcae5ab083a35b3ff6cb48c7f967649ec82 c8b3d4b6acce6b6655e17255ef7a214651b7fc4e43f9964df24556343393a1a3 8063c3f134f4413b793dfc05f035b6480aa1636996e8ac4b94646292a5f87fde 47b8ad55b66cdcd78d972d6df5338b2e32c91af0a666531baf1621d2786e7870 0a3d5b2a8ed60e0d96d5f0d9d6e00cd6ab882863afbb951f10c395a3d991fbc1 01fd7992aa71f4dca3a3766c438fbabe9aea78ca5812ab75b5371b48bd2625e2 ac7f9c536153780ccbec949f23b86f3d16e3105a5f14bb667df752aa815b0dc4 bf925f340920111b385078f3785f486fff1096fd0847b993892ff1ee3580fa9d e88045931b9d99511ce71cc94f2e3d1159581e5eb26d4e05146749e1620dc678 b2571e3b4afbce56da8faa726b726eb465f2e5e5ed74cf3b172b5dd80460ad81 d428d79f58425d831c2ee0a73f04749715e8c4dd30ccd81d92fe17485e6dfcda

InfrastructureandSamplesofHamas'AndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf

Report name	Domains	Hosts	Samples
InfrastructureandSamplesofHamas'AndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf (Click name to open as page)	updatemobapp.website www.idf.il project.org mobilestoreupdate.website glancelove.com clearskysec.com www.clearskysec.com www.ci autoandroidup.website goldncup.com www.haaretz.com anew.football.cup.world.com	N/A	8f1b709ae4fb41b32674ca8c41bfcbf7 95a782bd8711ac14ad76b068767515d7 4f9383ae4d0285aeb86e56797f3193f7 5b2aac6372dea167c737b0036e1bd515 b3e40659ae0a0852e2f6eb928d402d9d 7a9503152b4c8c1ee80ac7daf5405a91

OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation«OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation«OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation_FireEyeInc.pdf (Click name to open as page)	cnmah.pw ppdx.pw xhqd.pw ns5.biz qznm.pw orfn.com guopksl.com mjut.pw odyr.us bwuk.club ooep.pw travel.com mx.ru ivcm.club olgw.my kjke.pw dlox.pw checker.com vpuo.pw pafk.us gov.com wruj.club fisrdteditionps.com mvzo.pw onokder.com futh.pw odwf.pw turp.pw stion.com pvze.club pbbk.us neartsay.com ns5.pw ufyb.club oof.pw firstprolvdrec.com xnlz.club coec.club vxwy.pw googlesr5.com fhyi.club media.com vxqt.us bk.ru kbep.pw rdnautomotiv.biz chenstravelconsulting.com otzd.pw vwcq.us glavpojdfde.com grij.us newuniquesolutions.com hoplessinples.com bvyv.club kalavadar.com rmbs.club ns0.space soru.pw hippsjnv.com palj.us googleapi.com ssls.com kuyarr.com reld.info idjb.us ldzp.pw zody.pw bwwrvada.com nwrr.pw tsrs.pw sll1.com voievnenibrinw.com oknz.club wvzu.pw usdepartmentofrevenue.com dtxf.pw mfka.pw bpee.pw vqba.info xnmy.com nroq.pw lvrm.pw gnoa.pw olckwses.com hilertonv.com cjsanandreas.com hilopser.com luckystartwith.com pgnb.net zugh.us eter.pw auyk.club blopsadmvdrl.com hopsl3.com vikppsod.com wein.net ckwl.pw dyiud.com bipismol.com travels.com oneliveforcopser.com yomd.pw ctxdns.pw hvzr.info blopsdmvdrl.com twfl.us vpua.pw bureauofinspections.com facs.pw media.net nevaudio.com government.com security.com rtopsmve.com west.com jipdfonte.com ueox.club koldsdes.com goproders.com oxrp.info ssl.com ns0.website vjro.club rescsovwe.com simplewovmde.com johsimsoft.org pdoklbr.com ekb.ru combisecurity.com viebvbiiwcw.com muedandubai.com yodq.pw googls.com bcleaningservice.com zjav.us flowerprosv.com mvze.pw bnrnboerxce.com sprngwaterman.com tours.com moopisndvdvr.com partnersind.biz mxtxt.net kjko.pw usa.com bipovnerlvd.com mxfg.pw bconsult.com kiposerd.com deals.com mjet.pw wedogreatpurchases.com aloqd.pw ns1.website hoplessinple.com lawfirm.com provnkfexxw.com jimw.club fkij.net eady.club wqiy.info proslr3.com gxhp.top firsthotelgroup.com proverslokv4.com whily.pw dpoo.pw cuuo.us dosdkd.mo ddmd.pw widermachinery.com ydvd.net construction.com financial.com simpelkocsn.com zdqp.pw mail.qefg.info muhh.us ooyh.us bigrussianbss.com ntlw.net trustbankinc.com jersetl.com uwqs.club kiprovolswe.com oyaw.club yedq.pw oloqd.pw lvxf.pw gjcu.pw googles4.com plusmarketingagency.com doof.pw dlex.pw qefg.info algew.me mtxf.com lhlv.club ns4.space zmyo.club qdtn.us redtoursuk.org myspoernv.com ns1.press okiq.pw dvso.pw mjot.pw swio.pw dsud.com dnstxt.net vkpo.us yamd.pw prideofhume.com wnzg.us mut.pw pronvowdecee.com yqox.pw strideindustrialusa.com ctxdns.org kwoe.us kashtanspb.ru mkwl.pw marketing.com dnstxt.org hijrnataj.com anselbakery.com googleservice.com p3marketing.org strideindustrial.com essentialetimes.com qsez.club mewt.us jiposlve.com zrst.com apvo.club wuc.pw zjvz.pw josephevinchi.com manufacturing.com daskd.me mars.ru lgdr.com rnkj.pw qlpa.club fbjz.pw ysxy.pw tijm.pw cspg.pw strideindastry.biz revitaltravel.com ns3.space sgvt.pw enuv.club cgqy.us pjpi.com fisrteditionps.com widermachinery.biz cloo.com gjuc.pw ihrs.pw viebsdsccscw.com ns2.press withlucky.com melitravel.ru reeye.com dewifal.com wfsv.us cnkmoh.pw dbxa.pw cnlu.net pdokls3.com extmachine.biz amhs.club kiprovol.com fredbanan.com citizentravel.biz maofmdfd5.com deliciouswingsny.com prostelap3.com gnsn.us rzzc.pw stel.com manchedevs.org jblz.net zcnt.pw earth.com neverfaii.com	5.149.252.144 89.223.30.99 31.184.234.66 198.100.119.7 198.100.119.6 195.133.48.65 31.148.220.215 194.165.16.113 85.93.2.73 85.93.2.56 31.148.219.141 85.93.2.149 85.93.2.148 179.43.140.82 162.244.32.175 179.43.140.85 119.81.178.100 179.43.160.162 5.149.250.235 185.86.151.175 94.140.120.132 94.140.120.134 91.235.129.251 31.184.234.71 46.161.3.23 198.100.119.28 185.17.121.200 31.148.219.18 95.46.45.128 217.23.155.19 5.149.253.126 5.8.88.64 185.220.35.20 95.215.46.70 95.215.46.76 8.28.175.68 179.43.160.215 23.249.162.161 5.135.73.113 81.17.28.118 195.54.162.245 179.43.147.71 195.133.49.73 5.188.10.248 95.215.45.95 194.165.16.134 195.54.162.79 85.93.2.111 81.177.27.41 185.180.197.20 185.5.248.167 162.244.32.168 94.140.120.122 85.93.2.92 185.66.15.50 31.148.219.44 95.215.46.229 195.54.162.237 5.149.250.241 185.180.197.34	3917028799d2aa3a43ec5bad067e99a5 03e85ad4217775906e6b5ceae8dc27af 70345aa0b970e1198a9267ae4532a11b e2a6b351c276d02d71e18cd0677e8236 2d36634974c85eff393698b39edc561c 6a5a42ed234910121dbb7d1994ab5a5e c6ec176592ea26c4ee27974273e592ff 560e72858ee413d7a6f72fff5ab7577b 3a303f02e16d7d27fa78c3f48a55d992 74165408ff12d195fb9d68afe0a6011e faed087e820cad3c023be1db8d4ba70a c0d122bcdcb6ede7fc7f1182e4d0e599 e17fe2978ebe1b0a6923acd2ffeda3c2 9788b3faa29ba9eb4cae46f3c249937e 80b022b39d91527f6ae5b4834d7c8173 37759603c6cd91ebc8a1ea9ac0f2d580 793511c86a0469d579ff8cc99a7311e3 619aa4e6c9db275381ab0e7fc7078f5f ecd8879702347966750c37247ef6c2e6 5a0b796c7a6040e02c822cac4475f11a 6fff1d68203f8d23ccd23507ba00b9df 17fabe288d640476a70154c59d5a1ba1 99975b5ee2ddd31e89c9bdda7a3871d9 5dace5ac5ba89c9bba4479264f75b2b6 82a32d98e68891625b6de67a9d0b61c6 aaf42acedc38565f4c33cfdbb09733b9 8bd798e89d075827cc757b9586f15ce2 d7ca38e21327541787ab84bde83d7f81 af53db730732aa7db5fdd45ebba34b94 e9154e2f80389b853ab4cf2fe98f1ed2 188f261e5fca94bd1fc1edc1aafee8c0 24fab1e9831e57307d17981abaabf960 b14bc8cbc7f2d36179ebff96ade6d867 dc8b30c5253f02a790a31f2853fe41f8 6ff3272cd9edf115230bad6a55cb3ca8 2dc0f4bece10759307026d90f585e006 5972597b729a7d2853a3b37444e58e01 bb1a76702e2e7d0aa23385f24683d214 cf4ccb3707e5597969738b4754782e4d c5e94d973ed4f963ddc09ab88def3b5f 80eed9f87a18b0093eb3f16fa495b6f7 e020668055eb1d22710aa07f72860075 5d49b444734b003b6917b81f0a779b3e 79628a598303692238cc4aeb19da6fed 853a53419d9dbc606d2392b99e60c173 a5f75333d0c81387a5a9c7696b967a20 1f5022a02c82fbe414dc91bf3f1b5180 f74958adcfb11abcb37e043013f6a90f c6cddc475d62503a17a34419918e7fc0 3c0bd71e91e0f18621ba43de4419f901 291a17814d5dbb5bce5b186334cde4b1 0d6619481cfd29791a51ebb42ace5c03 402c34d7d6ce92bf5a048023bd2fde4a f20328b49ec605fd425ed101ff31f14b 973377e27b5dffa289f84e62a6833ebc 302ab8bd6a8effa58a675165aa9600a2 b5829caad7c448c558cb1dab2d9f4320 511af2b4c62fa4c2bb91f3be1ca96094 edc4f02f265a4aaa552435f293409f01 67c9bfd4d6ac397fb0cd7da2441a6fe2 70f0f8db551dd6b084682188c3923e26 be1154e38df490e1dcbde3ffb2ebd05c 06b9e2fdd2c0eeb78b851c93ca66f25f 63241a3580cd1135170b044a84005e92 d04b6410dddee19adec75f597c52e386 749c5085cda920e830cfed32842ba835 189c5a090d2b3b87ab65a8b156cd971e c517f48bf95a4f3ecba2046d12e62c88 6e9408c338e98a8bc166a8d4f8264019 dad8ebcbb5fa6721ccad45b81874e22c 7b2315ff1f2d763857aa70ad34b75449 effdaf7f61acb277ac44ee4d9bc8900a de50d41d70b8879cdc73e684ad4ebe9f 4bf691809224d17e49cebb071d22a867 90f35fd205556a04d13216c33cb0dbe3 8ae284d547bd1b8bd6bc2431735f9142 1fbe77a3b5771ce4f95e02a49c5b7f30 52cf6a63da29331d805a5a9b5015580f b5cc86726ab8f1fb3c281ab8f935260f 1a6c18967f4ce1c91c77098af4957e6e 0e0a51489054529a9dcb177d39f08b81 1a9e113b2f3caa7a141a94c8bc187ea7 9b87f9f6498c241f50208f9906907195 cea2989309ccd5128f437335622978f1 47111e9854db533c328ddbe6e962602a dd4f312c7e1c25564a8d00b0f3495e24 4b783bd0bd7fcf880ca75359d9fc4da6 fbf653b89a0814f515ddbdcf82cc3795 307a9ce257e97189e046fa91d3c27dab 754fc509328af413d93131e65fc46d31 94771bcf572d5c0b834f73d577f06cc8 2abad0ae32dd72bac5da0af1e580a2eb 6ac5ae6546746e3a9502cc489b71146e ddc9b71808be3a0e180e2befae4ff433 1f98c4ff12fc2c6fbf8247a5b2e4e7f4 facd37cd76989f45088ae98de8ed7aa0 76eb6f124fba6599a54e92b829c55b63 c8b8420d1503ae48ff35362f5d29eeb3 40c4c02d1e506a5ffc2939ec0ee8e105 fc661e18137583dc140e201338582a99 6146a18570e134c6c32633aca14375fb 7bd2235f105dee20825b4395a04892bf 8fa8d4c30429c099dc7e565e57db55c0 032fe02e54a010d21fd71e97596f4101 499ebef3ab31a2f98fc8a358bd085b0f c6b57e042ceadb60d6fab217d3523e17 14334c8f93f049659212773ecee477a2 e0ca85c0d264b84d977df0c48fd383cc a3754fba24f85d1d1bb7c0382e41586b 7d664485c53b98180e6f3c69e9dfa81e d4088f8202e0eb27f90e692f988f0780 9ae433cd5397af6b485f1abb06b2c5a2 58fbf6f9405327d8d158a1eeac19b81a b4d48f3e1ae339f2fcb94b7abceecfff 4b3dac0a4f452b07d29f26b119180bd2 c3f48e69bb90be828ba2835b76fb2080 a9c50b7761519fb684cdee2d59f99f91 101bdbbd99cfd74aa5724842404642f2 8e1e7f5ad99e48b740fd00085eab1f84 856cec68ddd28367c0d0f0a6f566187a d5cd1dedf3bf5c943e348a8b84e37b2a b6f005236a37367a147f9060c708ccca dde72a54716deb88c1ffef2a63faab6b 41c6861313e731bd3f84dd70360573ce 4eda75dfd4d12eda6a6219423b5972bd fa93c93a02fe2dee8a3b3d1cd82f293f 397d45b6001919b04739e26379c84dd9 28ad8e3a225400a1d00f6023f8e6c9c8 5f73beb23c45006ad952a71fa62c6f9f 21926646a658bdf39cf28cdfbb1aced7 c4aabdcf19898d9c30c4c2edea0147f0 63e2eb258a85ed4e72f951cdbff2a58e 562a64f1c09306d385962cf8084b6827 bbd99ef280efebe9066c0aef91bf02cd 37d323ffc33a0e1c6cd20234589a965d 6adec78e874232722c3758bbbcb95829 fa1c548a5d691ac9ce7bfd929f204261 5d9525b48870dc438130bd96fb8c5b66 762eef684e01831aa2f96031eff378bf 4b7a742d5c98fc62f0f67445032e7bc6 d1f55491472ca747561509106b71eab8 d38fb2d95812ffa1014e52ef3079e5da ee5a600ef9fd1defe07ea097095d1beb ccd2372bb6b07f1b5a125e597005688d 6a860285a6f7521995151a2a0cb6e316 467062d2a5a341716c42c6d7f36ba0ed 039d9e47e4474bee24785f8ec5307695 e184219366afb2e6bd0b9502beab1156 4dc99280459292ef60d6d01ed8ece312 a8e312d0c230e226e97e7a441fadbd85 9eb71edd5ec99294a1c341efa780b1b1 caec3babdec3cf267cc846fd084c4626 22ad7c05128ca7b48b0a2a4507803b16 c14eb54769ff208a2562e4ef47958d9e 3b12f36a01326ec649e4def08b860339 f80a80d25b3393825baa1e84e76ddf6c 22e7d4f7401ef34b3b6d17c15291c497 8608b31a446f42a7f36807bd6c16d2c0 e494356fc0db7ef6009d29e5ae869717 29a3666cee0762fcd731fa663ebc0011 189c72bfd8ae31abcff5e7da691a7d30 01d666fcbc4cdcedbfe7963f498e7858 f2ac2ec8173db4963dc2089ac90b8807 2828ea78cdda8f21187572c99ded6dc2 9b1af2d9c0c0687c70466385800b6847 5a88e3825c5e89b07fa9050b6b6eca7c 72d973ebfbc00d26170bfafdfbbd0179 42a2a2352f6b1f5818f3b695f240fc3a 325844f1b956c52fc220932bc717f224 92dfd0534b080234f9536371be63e37a 7e703dddcfc83cd352a910b48eaca95e 5dd2e677fd1d65f051b7f54e7402721f

TheGorgonGroup_SlitheringBetweenNationStateandCybercrime-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
TheGorgonGroup_SlitheringBetweenNationStateandCybercrime-PaloAltoNetworksBlog.pdf (Click name to open as page)	t2m.io jobs.jobvite.com www.reddit.com umarguzardijye.com nvd.nist.gov onedrivenet.xyz panelonetwothree.ml guelphupholstery.com cargo.com stevemikeforce.com 360.net panelonetwothree.ga www.stemtopx.com diamondfoxpanel.ml bit.ly arynews.tv france.cf day.us er.com stemtopx.com ngpanel.gq lokipanelhostingpanel.gq zupaservices.info reforce.info paper.com www.a1vbcode.com fudpages.ru www.asaigoldenrice.com asaigoldenrice.com fudpage.ru	115.186.136.237	db4d8d931f1b979cf32d311f9b03e851d3283b4f7e86252730247da25cf9f093 806098afc2148dabb838b24c4dfaa148269ac3ddf769aee54e75d46bfef0c506 bf37d6cb393b440f790ad2b333624fde079e10bfaeb44d65188e3ccc551c982f 81de431987304676134138705fc1c21188ad7f27edf6b77a6551aa693194485e 4e4967e3d39256049bc1054b966e5c609245fd3b2a934fda5cd1885526d8221e 5e805a88294f6d25d55103d19d13e798e01ad70e6b89e9c58db5d468cc63b3d5 446e1c80102c8b9662d66d44525cb9f519369061b02446e0d4cd30cd26d79a25 690fc694b0840dbabb462ae46eb836777420b3354e53a6944a2e169b965b0bec a100ce0a67c5890bcc38d2b6e30f9164dfe266126ec40a2fd7eb8e941dc7d025 84ed59953f57f5927b9843f35ca3c325155d5210824d3b79b060755827b51f72

FSIThreatIntelligenceReport-CampaignDOKKAEBI.pdf

Report name	Domains	Hosts	Samples
FSIThreatIntelligenceReport-CampaignDOKKAEBI.pdf (Click name to open as page)	nabuco.org durihana.com box.com ngonewsi.com com.android mediafire.com nbc1tv.com www.hani.co.kr pcloud.com ingonews.kr ngonews.tv www.rsaconference.com edsi.co.kr durihana.window.gabiauser.com cve.circl.lu nbc1tv.mediaon.co.kr www.spo.go.kr yadex.com com.google.android news.kaspersky.co.kr blog.talosintelligence.com ingo.co.kr news.jtbc.joins.com nabuco2.mediaon.co.kr com.sec.android ngonewstv.com ingonews2.mediaon.co.kr durihana.cafe24.com www.hancom.com help.hancom.com pastebin.com	7.0.4.325	c9e44073df7cfa6321b08acc8c3b7b80fd973d612c9d4274409f8fbcf0bf8d1d a624f9653b005c2e71f1a65ebe4de1f07b6441756ce6219f88eca035948c4682 1a69a862a0fb66af0cfc5dc131e435c3d4677525bf2f2dc3e42d35e68ff4b3a6 982147e4bc64546487129f62205531faa7a425907e383904625891b7f0c18547 2e4b8f1f08983c5e042236ef811c291ee55dc05cb69172fbeafb9367af075ebf 3f19eb0d46bb0d3d250fbef0ee5bc56c7dca8af179526996aec34cc18aa087c3 625c65fcdbfedb39a109767c415f8a9ac897f66a508bf03f1af387ce209fd826 b7e5f9391b12475fdae20c8afd6c2a7ab8e8a4072618e3e1543549f098ffed5f 751d2ed9e56abf3b218dbfd5de88576ee1be4b02760ec6431c18bdf31031086c 4f1dd7c10adee45f7ff13dbffa328afae26448ff39ba6d9ae91dec611705dede b2d8fa4e572663ec325bd467c148181186f734e0807e71195f59933a13d4dcd5 5f2ffd7479763424624986241a8f4cbe1c723b24752a20ae3bc07004da576f16 bab40474b0cff1951e38d49673bb70945d7a7aac7c6c00a28f8591e538ab8ae3 369e8ded9622b92ff153f5d5b073cf838fd3cb68b78addfd236602f34fc6a03e e5e2c90c5f72a920363999b26557dda3b5996e1d7729d769f43dddb62bbb6588 84629c64ced46334b808fc599c66f5edcade9911b252c1ceeef89d0fbc977ad4 d0361adb36e81b038c752ea1a7bdc5517b1e44f82909bc2bd27b77b2652667ee a45c939b1554fb72c1ac10f8cfcdc5b340321de8b06bd1cb6de047f871a1cb9a 929d7806ae63b5e23765cddf7ba78c63fee8a8e9cd191976acabb96febe980ff 19bea7f46f1c9b6fc6d03eabfe334a365d36c405919441f2a1f378bbc7174db9 4bcc34489b45850d086df86c6d12db714a5e6719292d4c30b6c3e93ef0f505f9 bd8fa7793f2192d4ff3979526955d5d6c965218eb0c0fe579f8ef0602357d5a9 a0359a6054ff3b245ca661ef5c51dd605410b946e1f0eff6f6898b2368b0ef7e dcf863227dd5f191cbfd320e7eb142c264f1f5aa94c6d521c4efb0ec17be2385 21e325c059429271d95cefaced02a1a39801926fab9df64535ae13a25a501c01 bded85d7024b6cf86cc9ce45ec851c80cb13790b9c4bd63b0b22b0fb672e9dce cd3f4905d02f9d2db270440ae59bd36e4aba1d750323078c2ea1cc85da129be6 9f6d9673c3ae3e4a5c7f64f5ffdf36b5b5ab97fdc2ebde6fe4eb37d44c1254f0 3a244285b78c8e99b0481339760aef554efe8eb2bff93a93b55740d4ab71421f fac550e331d6bb40ef2683e357b453ce0664ec4beec12e4e8ac71b5fa18f2381 2c8f6fa1cbbf91676b361a2011b6f43d1f1e75b8208f40be2c186ff0f586ca0b 3cfc7666c97c38f38a3b3ec1d132f2836ade7e6e6e3cddb30b0d7d81682de0b2 93cc473e7d3d0c4b018ed0c3cccf2109f7dea7fdd607cb8bb08ede13e086596d a3c9a459ac26e5d4f8f6191b3811e39f3516757a10a7818de6e092be9f646b3d 052ed5ec39c6c45ff42fbca7290d7edc8f3ca465b04211cedcbee66fb7547752 960596ad6ddcb8947e46edb2b7e1c098f37456d932dd3d93516e8d4705d0e81b 8c5b2068f6087b68b923bf0d1ef814e8d68ce767379820f0e9922683d63306bc 9a11b7f45f4f483349cbfebb1b1af512c8a4dd9eda4d9b5154dcb6f22bb0d253 a1c26ce6854b17a6d34d06a241b4a5086e2227c50006c579d65ccdfd7622c6e5 6a436aca00171111e8bb3e66f0ebe48d0cc747f1a04932bb682b1f7494eab9e9 032eda4f49ce866ed23936b03626bc11dd8e1e5b106489220dbf4a9335e9b915 41d3b14170f13def49100fa426cb2f9d3e27dd630acdf78cda8ca2504ca52a48 83d647a2f846fb5456692d9da24e6a89857785cbb273ccb5f7a16055b0c1a257 4ee3b3c45e3bd55613cf6727e000664ddf229a4f133954775e603c511fa3f154 396a684949c96815b54c8e4c2fafbe6324d8c4dde2c9294411658fb5209cd70c f809287e23fbe52dff63702477b7b67dcc877b7fe9db5abe9449cda18644c9de a85e57c55bb33b7fc0009f9c65d9f45a329eff3e92717a9dd099c0fa76fb8be8 9a1320b650bd40b91513ec6555c99e1c164e17ab6b1ea2b66be86658030256cb 800d50e38ebd78c5f11a292a06c9d884ff50fd66d5903e352ed9843fb633de71 596fbdf01557c3ec89b345c57ae5d9a0b7251dd8d5a707f7353dd733274c6eb6 7875614ecd08474662a7aa2a1d8830b9ea7749a997b529c5501c35be4da9cccd db806d0ee7144e8e5eff055cc6bd2c321def2740b11590821d507b6fd369142e 6506c9e239d5f886a9a725bb85f8a95d44dad110f861dcf9481aecf8de2d2ae0 8dc6e8eccaaa9ebe77b60ab364e7a56ba81bb00664485d3090b58286df0ca37c 62a2706b4669ba96ee5eb834ad5ed423442d76cbab7dd5084cec2248f4cd0585 6e531deb2b3a7b54782d44a1ec2f49b9ff463e76e05d44ee85cc104e4a8fb380 21438bf7bb8fd6f06e990b758b2187272ec6c21e6b83193c7c0dce2f60ce4701 6b15a7761443f6a9555c0a6cac41de78e71016d803b726abbb4b0489e8cc323f 0d2c05c0673b42bc934d85435199e1a852e7490f374871f6661c019ed62045f7 0d56c5f20b2da3659f05d613d3faeb41d9e82a45e9161c3b48805ebb7b2730b9 9c907e254f1723b0a32e4fe1d1636ca1d38cb6b654f71d31330fd46292543eca 8db746078b5fb6a363ae609870e69e1261d497417fb23b7170cb8ee81117d12f 171e26822421f7ed2e34cc092eaeba8a504b5d576c7fd54aa6975c2e2db0f824 32407904ef8cf45f7e5e9abd561be451c1eed229d3e92a777d4c2b7efc096898 f068196d2c492b49e4aae4312c140e9a6c8c61a33f61ea35d74f4a26ef263ead 1cc7ad407fc87acb9c961105943c87a7bd77c4d4cc90b84b46fb5dcf779b50fd f9c8548e8e49dce5304d5d60970519631f6231269ab8b1b04acd87ca014cd54a 281828d6f5bd377f91c6283c34896d0483b08ac2167d34e981fbea871893c919 67f90691a42d22a1e95080e8d3af57cb628b38faf9b15881b0e96def6d4605c4 ae5c5f5d9d853231eb120ac66534557bb2dec9cb69370da40eef5bbb026a3ec3 b6f006fa93ac25c11df839195e1b362dc0888f5e71ad726e78de7d7851f1d613 485f77e5d32de5dc05510743025a75af5b6f714e930e22098490b7afb71b737f f3ec8db8b1f52eba733478fbd28debde40650b004b5881f31d6deb3dce6eeada 7e90786ba4eef2b552c745a6b65110908a5ef5c89f68b337d66d75ace020b91b 9b7766b0f7e4b61da87d7283cf65aa2614c2a468024dee980a28ee52ad87cdab a7b7e6f2cc76830a0ed90b50af4f40ed10db73d8a0c3025d0b9131d15c9346bc deefe217500c1bb7e04c09037cf1d7d562927e31abc830694b0f3f995220ae9d eb47dc2d806b15f135a5b766cd3430e10ac6c0319b08f065b655172f87c5e5a4 3e9eab029c52ac34b91f906c8f92ad9059531f825905260023764f8a069edbbf 16a5126924e876b78449ff7eca701fee13105dfa9646de92b4d13142c6f40735 3bfc7bc7d08662ef572008be94e4fa23607a1294c50d9cb610ee79ba61270d25 037430c2ad2601f5a0393601d542c3d7d17a69690cf959bc4ed65fb86b27a15a 834600ec1f01a039d502a5c3f315d7aac4d95554327b19da17fda30b1d57995a d30cb50641ff79fa059fbf1950047d2e34eb3e9ee7b5ff5cced0912160d3edb9 ba08b13577eef393db69a20d9b881bfd18e86ec37690c25cc2931a7b26dbdc6f d9e440d78e9d6d656a52d7dc84f874163d0164db87d350860e766cddec1f10f5 226b3e4f4f3c48ab33e4759da1c025fc79d61aad04c4f761c0c2107bd51ff703 b831a8afafe9d32bb33432607ec88ef44edf4d516c38b95b69b110d7965c9304 c68e996fb9021bb7c316d9d5f9dad9251ec91989152f8908a5ccf1f7e2f581df 19a3e1bf2d8c5410a71358e2a780d10ce705b5076f877703d7ca49801bdc8605 22d42b6a20d655ce3719fab531ddd6812e40fb117a644c4d8cf4a239c1276783 262261a77c4e1f1435d9e9e31207c4664d05645237ed6d17113f6ee38fd6178b

OilRigTargetsTechnologyServiceProviderandGovernmentAgencywithQUADAGENT-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigTargetsTechnologyServiceProviderandGovernmentAgencywithQUADAGENT-PaloAltoNetworksBlog.pdf (Click name to open as page)	acrobatverify.com jobs.jobvite.com rdppath.com www.reddit.com er.com www.rdppath.com cdn.com cpuproc.com	185.162.235.121	119c64a8b35bd626b3ea5f630d533b2e0e7852a4c59694125ff08f9965b5f9cc 1f6369b42a76d02f32558912b57ede4f5ff0a90b18d3b96a4fe24120fa2c300c d7130e42663e95d23c547d57e55099c239fa249ce3f6537b7f2a8033f3aa73de 5f001f3387ddfc0314446d0c950da2cec4c786e2374d42beb3acce6883bb4e63 d948d5b3702e140ef5b9247d26797b6dcdfe4fdb6f367bb217bc6b5fc79df520

GlanceLove_SpyingUndertheCoveroftheWorldCup-CheckPointResearch.pdf

Report name	Domains	Hosts	Samples
GlanceLove_SpyingUndertheCoveroftheWorldCup-CheckPointResearch.pdf (Click name to open as page)	com.android checkpoint.com research.checkpoint.com anew.football.cup.world.com	N/A	2ce54d93510126fca83031f9521e40cd8460ae564d3d927e17bd63fb4cb20edc bcdeb31c0685667da5bf2b61bb0c7c7a00d76a8217d093713827dc5951cc98cb 53482979ff5c40b93a6123c043a7deff01d085b08129f1931cfbbc541ba1ddf2 67b1a1e7b505ac510322b9d4f4fc1e8a569d6d644582b588faccfeeaa4922cb7 1664cb343ee830fa94725fed143b119f7e2351307ed0ce04724b23469b9002f2 166f3a863bb2b66bda9c76dccf9529d5237f6394721f46635b053870eb2fcc5a d9601735d674a9e55546fde0bffde235bc5f2546504b31799d874e8c31d5b6e9 b9f64ffce38e224e15ec6f81b389a315b35aafe0da173205ff5e6bed4b5ee874 7c2c5909d86323c53830552b5e2fd130d2ed68fa22443e1bad22896e08f0a652 b45defca452a640b303288131eb64c485f442aae0682a3c56489d24d59439b47

Leafminer_NewEspionageCampaignsTargetingMiddleEasternRegions_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
Leafminer_NewEspionageCampaignsTargetingMiddleEasternRegions_SymantecBlogs.pdf (Click name to open as page)	symc.ly magiccoder.ir e-qht.az	N/A	N/A

RussianArmyExhibitionDecoyLeadstoNewBISKVITMalware.pdf

Report name	Domains	Hosts	Samples
RussianArmyExhibitionDecoyLeadstoNewBISKVITMalware.pdf (Click name to open as page)	secured-links.org bigboss.x24hr.com	N/A	a87daccbb260c5c68aaac3fcd6528f9ba16d4f284f94bc1b6307bbb3c6a2e379 083c57797944468895820bf711e3624f b4a1f0603f49db9eea6bc98de24b6fc0034f3b374a00a815b5c906041028ddf3 be7459722bd25c5b4d57af0769cc708ebf3910648debc52be3929406609997cf 534faf1cb8c04dc881a3fbd69d4bc762 23a286d14de1f51c5073caf0fd40a7636c287f578f32ae5e05ed331741fde572

ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies_McAfeeBlogs.pdf (Click name to open as page)	www.intezer.com mtn.co.kr www.operationblockbuster.com analyze.intezer.com blog.talosintelligence.com reeye.com baesystemsai.blogspot.com	N/A	N/A

DNSMessengerPowerShellMalwareAnalysis.pdf

Report name	Domains	Hosts	Samples
DNSMessengerPowerShellMalwareAnalysis.pdf (Click name to open as page)	www.sentinelone.com	N/A	340795d1f2c2bdab1f2382188a7b5c838e0a79d3f059d2db9eb274b0205f6981

Area-1-Security-OperationDoos-IRN2TargetsSaudiArabianOilandGasIndustryWithCareer-ThemedPhishingAttack.pdf

Report name	Domains	Hosts	Samples
Area-1-Security-OperationDoos-IRN2TargetsSaudiArabianOilandGasIndustryWithCareer-ThemedPhishingAttack.pdf (Click name to open as page)	shoter.com doosan.com forskys.com barsupport.org jobs.net shoterup.com mic-careers.com dpsiesr.doosan.com www.doosan-hr.com www.utilities-me.com 30.shoter.com doosan-hr.com coldflys.com middleeast-jobs.net	35.35.35.35 173.254.236.148	88ee2c27e1dd4ed3400adf7e560d4c4ffeae17bb 991241310d775edff106be83719c07ab b409538c99f99b94a5035d9fa44a506b41be0feb23e89b7e4d272ba791aa6002 848e6582976d56f0c4b32f89f750a74c c2731f4c6927025b2747ff3ab0d8bd3d9788d8dd1a08deb8d148c30877b203d2 3db49888dd5336befee765d43f23d9f8 0bd6e06470e384571058774d9b43841c8ffe54c2 e37bafef0d3315a015f48a2bf845d855 eb1f47c9f71d3fd2ff744a9454c256bf3248921fbcbadf0a80d5e73a0c6a82de cbbd0b863c8a31e577b9eabd4d2311a3a919370b0cc848cf297151321b3f6e66 1579208bc40a873e82603844990f6a5e 7595a6534866ab0fdc0d088a0841f04d689d6eba41761ad20976a40cfa4fbdd0 1a30d55623ae68703793993c94e2af620f3655b206023ecdade099aed6a16452 c10fc157d1c291c66284a9f07b52a376 8f3953da84ec9d34ae6b97ff0f574758d39edad9 02171e646f919ef3a145323928f73f0b7104a873a4842c23abb8628d740eebec 214cd857955ed59f404f5b9fb76751eb4c2b45f4c2b9b821903d8f6c5269d810 0b88bdd5e6beec6c06ec8ad670ddff980acc4e35fa6a434268d6a0203a9dfc7a 6a3923c6c35ed2ee302de57100b15f9a7aa20f9a 20c240bde16c6dc2f1638bcdf944975c c7806e21fd9ea72d8de4b01f9dbd65a74f070b57 c71123d2f76874def40041a535839dd2db31d645 80a1a1bcf4868d08a0e65475ced6b8fd337fdf86

TheUrpageConnectiontoBahamut,ConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf

Report name	Domains	Hosts	Samples
TheUrpageConnectiontoBahamut,ConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf (Click name to open as page)	le.com lesforinfo.pikpro.eu twitck.com nderfeedback.pikrpro.eu pikrpro.eu appswonder.info	N/A	434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd f1a54dca2fdfe59ec3f537148460364fb5d046c9b4e7db5fc819a9732ae0e063

SupplyChainAttackOperationRedSignatureTargetsSouthKoreanOrganizations-TrendLabsSecurityIntelligenceBlog.pdf

Report name	Domains	Hosts	Samples
SupplyChainAttackOperationRedSignatureTargetsSouthKoreanOrganizations-TrendLabsSecurityIntelligenceBlog.pdf (Click name to open as page)	N/A	N/A	c14ea9b81f782ba36ae3ea450c2850642983814a0f4dc0ea4888038466839c1e 4ae4aed210f2b4f75bdb855f6a5c11e625d56de2 52374f68d1e43f1ca6cd04e5816999ba45c4e42eb0641874be25808c9fe15005 bcfacc1ad5686aee3a9d8940e46d32af62f8e1cd1631653795778736b67b6d6e 279cf1773903b7a5de63897d55268aa967a87f915a07924c574e42c9ed12de30 e530e16d5756cdc2862b4c9411ac3bb3b113bc87344139b4bfa2c35cd816e518 e5029808f78ec4a079e889e5823ee298edab34013e50a47c279b6dc4d57b1ffc a3a1b1cf29a8f38d05b4292524c3496cb28f78d995dfb0a9aef7b2f949ac278b 9415ca80c51b2409a88e26a9eb3464db636c2e27f9c61e247d15254e6fbb31eb 0703a917aaa0630ae1860fb5fb1f64f3cfb4ea8c57eac71c2b0a407b738c4e19 28c5a6aefcc57e2862ea16f5f2ecb1e7df84b68e98e5814533262595b237917d

ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally«ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally_.pdf

Report name	Domains	Hosts	Samples
ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally«ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally_.pdf (Click name to open as page)	en.freshnewsasia.com iric.gov.kh partyforumseasia.com scsnewstoday.com mlcdailynews.com chemscalere.com atimes.com reeye.com	112.66.188.28	217d40ccd91160c152e5fce0143b16ef e413b45a04bf5f812912772f4a14650f 5d6ad552f1d1b5cfe99ddb0e2bb51fd7 cf027a4829c9364d40dcab3f14c1f6b7 ba1e5b539c3ae21c756c48a8b5281b7e c8fdd2b2ddec970fa69272fdf5ee86cc 3c51c89078139337c2c92e084bb0904c

OngoingAndroidMalwareCampaignTargetsPalestinians-Part1_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
OngoingAndroidMalwareCampaignTargetsPalestinians-Part1_SymantecBlogs.pdf (Click name to open as page)	zee-player.website kristy-milligan.website pastebin.com zee-player.com	N/A	cbf9a0737e27fafafaff5c73825bb96907a976b230bf18843badd7b10d475eb2

APT37_Final1stspyReapingtheFreeMilk-Intezer.pdf

Report name	Domains	Hosts	Samples
APT37_Final1stspyReapingtheFreeMilk-Intezer.pdf (Click name to open as page)	www.intezer.com	N/A	fb94a5e30de7afd1d9072ccedd90a249374f687f16170e1986d6fd43c143fb3a 9c52cef8d1e5e5f8245860c205364138f82c54df

Accenture-Goldfin-Security-Alert.pdf

Report name	Domains	Hosts	Samples
Accenture-Goldfin-Security-Alert.pdf (Click name to open as page)	micro-earth.com rambler.ru bank.com wedogreatpurchases.com moneyma-r.com dewifal.com tejara-bank.com essentialetimes.com www.accenture.com doneckforum.com privat-bankau.com privatbank-ua.com voievnenibrinw.com despanabrandfood.com despanabrandfoods.com halyk-bank.com kiprovolswe.com bipovnerlvd.com fisrteditionps.com silverdiners.com kiprovol.com blopsadmvdrl.com accenture.com bnrnboerxce.com	5.8.88.64 46.166.163.243 5.135.73.113 192.99.14.211 31.41.41.41	87327b4045b9d004697aec7e7a4b9ba8 00c38b787eac602ffaed0b9372f2c443 c38b06f871d2268972fa01725b59d7ed 521c81c62836a233a6e771bc3491300f 6da6025fc7956f644b0b161781071cec 211fbf34749df5e717e8b11fecb3f648 09d43765c2259a8df868a5fa6206ae2b b10c3d00a7ceff0b7050f450968c8f69 14f71d5cb8f15f0a9943b5d709a85b73 21a09cf81f3584a741c7167f622d6c50 50598c4dc7c299d0cbd92c128a56944e 039d9e47e4474bee24785f8ec5307695 949b7e0f9d309e8a7ab32fa4664a7906 7b528c9d8150e4a4ab27b90a4e333763 de394e9d294d2c325298eb54826ba116 31fcf8a4ec7a4c693eda9336321cf401 29573b1fa60bce8e04dd2a4d554a7447 7f1aa2b2d539aa7d3dbb067417457309 55a57741f49d6c887992353bc47846bc 90f35fd205556a04d13216c33cb0dbe3 b01cf8f375bc0aff2cfe3dc1b4c1823c b3fb88a5aa791aea141bf3b4cf045355 54e7f3a1a1a8857e35a45f4eb2a3317d bdaa27c6284ff95c01178db7a96121a4 2a4d16ddad27c6eb60e197b6b07c2df0 dae11ed0013d58000f10919b8cba8023 92dfd0534b080234f9536371be63e37a 9a273653364dfb143ff196d826d2bac4

Accenture-Hogfish-Threat-Analysis.pdf

Report name	Domains	Hosts	Samples
Accenture-Hogfish-Threat-Analysis.pdf (Click name to open as page)	friendlysupport.giize.com www.accenture.com accenture.com algorithm.ddnsgeek.com firefoxcomt.arkouowi.com update.arkouowi.com	149.36.63.65	ed65bbe9498d3fb1e4d4ac0058590d88 36db2c5f8bb947cad25a4abeaff1ff0e827bd7fcf9c77dbfb36247e3fc9f530a db7c1534dede15be08e651784d3a5d2ae41963d192b0f8776701b4b72240c38d 44c7319d8d7b84c52c4a6c94056d246b d956e2ff1b22ccee2c5d9819128103d4c31ecefde3ce463a6dea19ecaaf418a1 e28294f62178451c7b11988d2c790f7f44c81b0bf06ab252e60f6b9ca57cacec 797b450509e9cad63d30cd596ac8b608 e2627a887898b641db720531258fd133 f9acc706d7bec10f88f9cfbbdf80df0d85331bd4c3c0188e4d002d6929fe4eac 388d6b38f21c79e0e2ad7ead1108025b8bb3486d8d29f2468b5cb0e54bff11d2 4de5a22cd798950a69318fdcc1ec59e9a456b4e572c2d3ac4788ee96a4070262 5504e04083d6146a67cb0d671d8ad5885315062c9ee08a62e40e264c2d5eab91 37333ecdd16b1ecbcd070b202492c1870dafd799f6299a420cdcc8a9e149cc93 7188f76ca5fbc6e57d23ba97655b293d5356933e2ab5261e423b3f205fe305ee f6449e255bc1a9d4a02391be35d0dd37def19b7e20cfcc274427a0b39cb21b7b 4f1ffebb45b30dd3496caaf1fa9c77e3

Appendix-TheUrpageConnectiontoBahamutConfuciusandPatchwork.pdf

Report name	Domains	Hosts	Samples
Appendix-TheUrpageConnectiontoBahamutConfuciusandPatchwork.pdf (Click name to open as page)	aliasway.com voidplask.com gwesteiwr.com xtrbuz.com qianglongmil.co classmunch.com w4zone.com translator.com capsnit.com crazeprint.com www.checkblink.com logstrick.com logicvisor.com work4m.com pikrpro.eu digivx.com blueclickr.com errorfeedback.com www.flplayer.co chirpck.com electrobric.com stringbit.com mania.com trekicon.com ngnetwork.com by4mode.com i3mode.com source4z.com twitck.com ringatomic.com sysknox.com cpull.ph hikevalt.com dragb4u.com muslim.com 32player.com upgrade9.com traxbin.com typehash.com erapro.com digitizet.com analogbiz.com tor.com yetsyn.com computesystem.com scan8t.com lepze.com er.com mil.com qutonium.com ambicluster.com b4invite.com entity4u.com bitzroid.com zonafield.com redopro.com appswonder.info portstake.com www.riquitz.co info.com www.pikrpro.eu scrollayer.com opo.ph gigatrons.com conioz.com buffdrops.com er.co ss.info referfile.com flash9v.com crowestore.com relaybg.com 328882259567290481.preview.editmysite.com as-pn.info	N/A	7af0e7c16435ffb30372bd9b86277ae95c6136301789f8e4724c752dbeb9f77e 7bc9bc2b34a8055601fe52e01b0d4ca0d32ee62287f88b1b6b0d87e8e7ef7759 d89654bfd5091e78ab76089feb07f5e48e128ca71b43e743d33bf6ab97dab336 68f3baddf4f24eadaf715dc27d01456a2d5a3d1f116a9fe5f1ccb77ade585241 c0003222f997908c4552f32f95bd3fedfa4b3c9fc780ee363a7894c68ba0d4dd 4ac870ef498441034054b1c0226ab079568e1c45bd8895e621598c9023318e66 16099bfe11029702fb1fafb9eca00865244e035a18250c4f3284799f334aa8ad 041b1df3684c2c37b55cb3bebce37e11e9273259deae50f303fb344fb28065ec ff184e204f40b2f917c517a2abf92da20a96026e02ba4fbfa405d5c72ab96050 a577079c23fb59ca552211dd118214c32dd5fcf0a49962c6dec02df8779ce15d 6cee1781b3acddea76959b0fc3c0058938da9ed4facc9c12c742633bf2dc5ca2 5bebe3986c2dcb5f50ea5d34c564c24ad3bbc132e648f1d009757a0d69c87e52 2a3228c5923e32f79c2cbdade14d0e8c79d55b9532f3a3c83b359b1913979ff8 9c8c3ce88f8d99207a68405a6d67dec108e58cbf26de5be3130158e96e570b72 7d566e2ad6d41bf16e3b7fdb0ad36f351dad59a6841b59153962f70907ddc768 efd5168f6ce4c94792e003d249e8af165e888d61bc5db36237cbc5a24534f268 229805c8c6b2c54f7e34e23dba61268a1ef89b04f9052efec292366aa86c224a be76f24280919f1cb952c9996bc927e6e485123839ba84bbadc8fb9eb885c354 26f1b419a5f9b2f8a853429ecee78ad2aeba271fc8fc00ca2a97e818c562e991 605a80c8b7305ad1d6815bfe2035128c8dd06e8333d8b3cba9ed68caa4aa0c17 e492f301734d6694974086129f66c8afd6368c6540f08c91fb33dd9003da08d8 34c420caf4d86e8cf73acb558556fc687983d10d512c772f0f0c31e2aa04a959 1378f07bb8f64214d219f9487faa539c811aa65343a4d7bb3db79bc94878f4a2 04082c8d6c81d7f5cc1509ffb3fa90648a00081e939230a963d94e72ba1e4362 4fd25d2c9e97d23d3b2ace30ee534643dfc0b03ada2e976e185832d3b8c0e32d 7ef9b59cb57193fb62039602596723189fcdb5986590ca4e55edb1d0034f2faf 815466ec21c59f7704f094a0e4cfc4f817c8b98231d10fe01919b6bd60eca64e 4e32c59307f34560903ed4622d20860d43ee37ba01b349ebefcb9ae30b74c64b 0f6138395d5ded2c2e123efe75427f3d81fd85c98ad6e5a6fe14e43744494f62 85e839b45088bd2ff0ea184634e567fb1e3b7f86caf8a7c0e839218906da4c0d 335fa41bff0aabd07b23ac84d4a0eb16e95dce2426220eac0fb8a4c02f05b23f b1172084ba179d97c93f5e31ab6d0756f0fd7036020f021a11f6303b35049461 2819700088787eea566f2c70457a5b334f3246119585d039f45e27fba6c5d6fc 1f0dabd61947b6df8a392b77a0eae33777be3caad13698aecc223b54ab4b859a 6f73f81ce78588279454c9a2c0188c8386f665ce1d62139a8874270866388c8b 9e9389f4a1e025ed6549aa4e2ff73f6e5710d74acacf392c607cf824d4640123 55216ef475ea7efcee26da19c11a842e4b124611fb3db787bfada2ebc9b39794 ddf2520224381c653119908f0dceb154138b0724fa8307ef95629429576024e7 79dc0dd74e445f1aa1f7000150e3d6daeb5aff0bbb05e7aa79f761ffe88df0c1 6e0144f57aa20557b7ec2b3a05fecb74d45169ed740055fa36f7678c418065d7 3ea4414259502bac22bd0bffa5735e4a4f03b85c576057eecc1d6fc5ea11bb22 49cf46406477bf58f6cf2ec75bf6eb8370579b9d53f9d7f2896642010a494d00 45ae4149fed22a01a4f96fe176c90745d2b96f30717122695c6d7f6eeabb01f9 b33956a1a0a77023d4ffd4fc2f80650d83fe2da7e174792c840527a8a6271904 917dae26c88baecb8b17d4161be6e635cfc0e7572815870848c874e07786a1e9 9ea71ba619e521f6525c72de25a6f510c6b5ed047cbf24eb3494806e4d767979 1a510082dbcd23a86569c713a848100a1ea018a6f35f8fecf9bbe6a86f555ad9 eea8cc1d819e44fbd5715d746597afac1e47647bcedce4f748cba17306ea2043 552077169995dba6295c2f61aeda8baa7129176af133b2174b720a628498a085 c33a349c74a7b15833169189cfc31fdb9c7bf25212a113ce363fbca4bd13bd1d c6c0ca3ca838b6ab857a1b22cc66ad568af96a3368c3c99598e63c4e4e6c85cb a69f3c5bd2e22aa8d830252386a689b28bbe5834fcfe675293707531e5fc4a07 816a272e95f223eaf31e8830e054e0711cb868684c0d0569a52c2abfd0ad28bb f558351453096e02e5fbeddc10f59f6f8e5311cefa626aa78f06ef8474997df5 1755ce13e1cfafebeef2568fc6fb271d7ae68b379280c77068de714b5b7f4f91 a7950c25bdbe103b3f0071bc35e90c28b06eea043b2175222674675945e7be22 bd8bc9544c36c1ad681faff0b025274178ad045928beddfaf91841b344a5715b 4f3a100d5dd86ead436911223b323175ce0d0f2c678018a2b27d4545625f9740 f43ea2db9e79a819901c6ebb2a7cabbdddf4b3d12ccea985604d391facccbd32 8256fc98e05684569992a93318f519649d381081534e03b39263b071dd6e14c0 d7dcd1453121f9f2f0fbb2eae9fd4828be263afa617ac3baf34ec9910da1d623 be12ec7094ab85adb98f9199fa88113ceb8c98e1e80b46a0d00abc74efb96e29 211ee91911200049af80f8308a0d254f7640c5d1f802ad36f6970c148a4a9890 dc4fa0f51999ff73135f3d97fa01f5a4ce846facdcddf5d51fd59f9111684620 60c1b45113484d97e3a0d56959ac6d010e945d28a266ed52abc20159f9a9a48a 184446bcb17021c39128369e9fe3d06cd0dde430c7f2e90c945c5a3299ef7b52 bd7f33c1566f56b1bce2f59e983b60d79e2e2de80ea9cd6dffe613005ab2e817 e8ca99bd810ae24fd5a196d30fc41efcf58be8ca2c56f05c4eba48f97a61ef49 abe889fd02a7e107c990d2a3b909d5f82be6f4d12cee67c01d15e73843cc9a73 94e1916e880eedc02b8c61557926a77d7555f3f7a0131c390cdb4e98a23ff1f0 408e7360b5f382d1fe90719dcbd1343c22a48bd17017ac47374e15c36cfffe1e 0ab0af32f1d5b1bc505b7f623f4b099e16364f25604a67ffcf550d7556352d18 6f362bc439ce09c7dcb0ac5cce84b81914b9dd1e9969cae8b570ade3af1cea3d d92037764fbd8a2dab9577b43e9a007af77859e38b67175fec6b7484efccea28 434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd f5fcbc63546dbce989d61895cc51f00efcf7a0241971350d749e70b0a3365d55 a493f1940a017e6ed6933f7831c11fffb59cda0bec7b3458641b83f738658d84 783bcf19e34d58d00ba135369a57fe31cec22d027fc8d87b073a28a7c1a4e9d8 b4a6b39d5c7339fbb22c5113090e2d87486052bf45c0599f96959817c8a3aafb 11596b82b8f0f4abb7998fc1f81c2205f5fdb23817c2963d4fbec247750552ee 6874e3b191c047695fb4b020160604b85953a067ceec795410d5fda22994db95 2af07c7cee0743b9ab84eb5947d0334cb0b1dc874fa562920aafbc4ad95b12fc 69055236df30a32f08fd4bd20b4c550d25fd1812b26999325743f36c3ad1cf5c 26b77bd33ace3d2ae5a56dcd463a57b78fef09fcbcf4e838687a1145af97d9f5 3bf87393abc6344a3e0dc751c81cced760b886e2f97b319c1443636b9957f2b9 9f204d2e9c66842812ad42907334498b1dda11ce4bce937e72de9fa768b7a217 801137138d8b4a44dc84944018c285d13f61887746f440c65a9f604c46b16ce9 a8165cd1897fb079969647c6de10c2489e5b8822e0f9f5643f855d4e5746353e d1880adc559a52bfccc50f875eab81d8a9f18ecea55f3554168ac06a1315c712 565de1908528707d44be5e6beac37456c2424035202d9272c175a1b96db19cdc 54667597fc00e78c598f8e925c4c093b11bcd5a9f9644528aaccd73433e6154b 116315d211261df94da3d834c324f65b368025c009f7e387564f6cd23fbbc08c 913d5c82a9ba2b3a6c42bac93fbd79ed748c1ed4d7b3ff19f97ae770433c7e73 33c5867b3375ef7e879caf614e79455df26adafdbb6aad11bde23edf695b5d85 c3f20c24057c4911199e17a30a9ad67d3cd6c831bd2fce0a4b542d7a9370278f 724ad018fb6cda26f65c3f9878715e6b4a32f07ab8ced1331c7fc1db3164135b 01bca9ae7b7d5ac5913f7272254b09de2dcecb0ff0fee7f6b6e7767ed979fec5 d53ba4cb902eec9d3b7629a6c59704d66a7b4ce14484ceff4237b50f7d165fc4 5206ecdb558dceacb204f11ce7fe03b5ff682f8a51468060ddeca35241b9e14d 80f02104726ff8f78db3ef70c2b641c373ec36abfd5d457219648b6edf71a521 1be9579507a8b20110b740c65f1b65d920c455ab1c026cadb1a250a267c206be 8a95841bd088a6e8985e378a14a559a7a192142e7970d2ef3f109b9696ca0e4f a3bd44c5e03200b74168f576666f0031bf64072e16205a6edfe3116b4eac7cb9 2e4f4e707831e9e7884744200621c6fcd88ed26dadcc15361acd2f249943306c 6d981475f453589178f4fb56ffbb579cfa081d77bc2018aacb5097a2455b39ff 5f2250b46514d4b3f99f3a66cfff97a60e6185e4bbd13ee4b824d97efc0604d8 47c8b680caaff83c000565a0649ee1419834329afd58505d8459ecac325a7f32

Leafminer_IOCs.pdf

Report name	Domains	Hosts	Samples
Leafminer_IOCs.pdf (Click name to open as page)	adobe-flash.us ilhost.in offiice365.us adobe-plugin.bid microsoft-office-free-templates-download.btc-int.in iqhost.us microsoft-office-free-templates.in	188.165.187.235 51.254.173.240	de481b765df8a44dc7b8528bf4822332cbd6105bce780e3c99da2cc67ab1263b ac33d303a9903f8a181e323eff6f0053234546e9b963f6bd1a2867bbb70ce2f9 09a20ca2db5b75f4ee55874929dec64acfffa46d54a4ed561b9c3f04baa91d52 d94c5bd51cdbdd87ee4eb8005022be2ed763c791660416212a8e6a6b18576ac8 ff8c9d8c6f16a466d8e598c25829ec0c2fb4503b74d17f307e13c28fd2e99b93 48529fc232a99b8cfa14cdc1b982615e9a96942b4e0a79e4a88d504faac74c7c 9d3801af7f8270ee550f0e3bb31e2ead903c45849e099c80d3c34b0076ca7e6f a4ec0964b115cdc7c3e2fd2bd60651a5105981485a4cd9a1ce5e3d29222f6303 d01f01cc4832786c2821bb51d1abf40efbdf5127cd1d11e674c76996f1f1b145 7b8d27bfd5f2199e984c3038ce7625069f9ee0ec57dbfd7998e37afbe18011f3 b13ce2692d7ea4ebf343916d1f4c6de8a73376d486d96f3e7ceddecab5068ccf 9aa8f2d9245d0e6cef375ed999da6a3c9715fbe2a20589fdb388a8687707133a a115a2a704386293f4c5e7108b9dab6afc42d4647cbff47023f2d2039c6b72ae 85e9b5c3bd88a0c2b535c8d89ed0e9f875895e758228da16b5a46f6ff70e7e77 e931848dd6e5914e8ed0b287ef27544bf6c444fae05590a174307b437a1ea866 c05205771d1cb9bfbfd7139a7ec8f8364c2820d6de3bbb93806530f1dc7a4283 f67d378140f4aca98d4bd427eda7052ad1205dab8b6028a7fa00254d0c60aeea 7d829abe26b30ced467513e95f3448bc9f30de2fdced81c20b0d7699bd69c644 3373d81a74c1ea75c794244b2c6d4e5fb246224128412b9348291e2f68994d83 58c9e11a2cd18bc6762753b27225423257b0d8e84592a7fe8b1c9bdd97129546 36e9c95b65692b110f4fe2ed27aa6066368c07525c020ec081b59bad272e6172 332762804dd17f9b81620ea60ca8962daa493df24f6d98799d784d50fd4d0108 ebd01e75c633c212265fe883e869b543b27c34819d8501a52dbd21fc2cb533fc a36fc0d9cb5b415fa8d6fe89434aca931bc4d0f9ac56ada7b7b9a9e601966860 efb340cf61009acc14b8463c185340bae0269b957143469dc7270af85ee2092d 70c30b4cc6a9a420bec3ad25a0147c7ff91535a04ece95036334cb23044eda4e 7b06957c6b8450953967eb9c5f762e389a92fcf761b6885b7cb6dd2407641f3a fd026f5f3995b0664cde644da0d21b7488f5baabe0467dcec14092624b86b900 e3612f7e389695f6f4184cbdc5dc9512e370f3f3863afcb38a17d59d6ead8dc0 200ec4e8f16ed205cf94c02fcd73ee43ee511fa44ce34c458a1fca195c4bc737 cb34a8f0dacb1ddccd89e0f40822dbdb0a3e32bb22c0801325be53bff55afd85 09653415084e64caed272f089610c5218a60372e17755ba71176785736e71c0d d152da24739964acc8cc9fbd8f60a8ae7b8f7903c37168ce53e01b451d4aba5d caa2bd3596cf15d4d09fad3d110052460bc05933587a16e13f879fe1469a1377 7897406109e2454e4d99044e24a2d4fe5902473c2c76b82c2569336805989482 670dc0a8182503b272f8a0f5cf93ea1e9f12fd46afdf4930249bc0fa588bac2d e8f409387c6df73c201776633d44ac97d4fc1958bf79b1b36659e4bf904ccf28 2591b50355ed8053c8ed2e122f0b5769dd52c6d0b658cd0f2847f39056c6ac8c 6f5b1269175d3937a5f92c62ff3ef1dd693827705d0d41456d93d5243c1dbaad a2155e4dd281ef7b01a1490943b7fb06706d7ef02c0f955611e941d06b6e3ccf ffb6acd2715dd988fe3c3fdbd7d45159f8e5b529eea506a856109a8696e93a80 d1e4081b5fdeb09b280674e0c34f5495527a621bb4f42601f97f123761c514c0 c402e570ea5e69c42898cb6a1a6be39fa9f5a90e909c2d1a4a2276df80abca97 d1ee0cf551e5fc37d482484d3de1c5718a5b8c9cfadd907b7b3ccf9324a599fe 4b16cb8b0eaeb8449d35290edb00beb3002852ad0225f52e5476e16c853447c5 1e4f56a1999ffa5376ef0acaaa5da0993f07e9c5aa1c222e297db7a4117d04b1 84803151c5b73a53de91844968f377e6ee33ba82910aa1f612595a19aeb7e529

FireEye_rpt_APT37.pdf

Report name	Domains	Hosts	Samples
FireEye_rpt_APT37.pdf (Click name to open as page)	yandex.com hmamail.com mail.zmail.ru india.com	N/A	7c2ebfc7960aac6f8d58b37e3f092a9c 183be2035d5a546670d2b9deeca4eb59

Bitdefender-Business-2017-WhitePaper-PZCHAO-crea2452-en-EN-GenericUse.pdf

Report name	Domains	Hosts	Samples
Bitdefender-Business-2017-WhitePaper-PZCHAO-crea2452-en-EN-GenericUse.pdf (Click name to open as page)	centuriosa.info dll.pzchao.com zl855.no-ip.info 455.pzchao.com zll855.no-ip.info up.pzchao.com rat.pzchao.com pzchao.com down.pzchao.com zll855.gicp.net	125.7.152.55	7b33a8c1184683f94598b4bb558f5050d5512b2cb66efa27d58322b97cf5569c dca2e23324f7a740d431eef0083c0b795c63fb2f4ae4bc55bc236b12ea0510e2 fb602ff538f71c04b2c8271514b3923d72543ed92e717c046884f3eb1317e2af d2591f4fe1c65e687c69cac007af27d24f656af5bc8eb8ff20064264fb71d56b 81141007975251abadaa4c055f79999c0e61fb95724bfa4f98a91ced00534ebb 718f9ca7a38a15b0d34a29a0b8b50c88bea9d67501ca6e2ae96fbc79edecdb9d d26fb51be2d3db37fa37ba542365f616a1cecc3e4e0287e7a29a3a5a2dce7083 698db26e6f87e19dae93034fb9e1543e8675135e6da85120de20ab6ebbe9f30b a1ea427062bc9c497ed0660845c7e395500bf3d7f2f64c2a3f1137437d8ab6c9 d7c0d5f399cf3f6738373aa72a5624352ce9eec1d2420c2aa91f73c565b721fd ba2ffb1ff4003db3fdf3cf48b38b3ba6c447844b4399781cbb930fc9e11c23a4 19841507ccf88d717a09bbba06a36644f1a555d1a53a11a2dea384bfccb9749f 2234a0ecb268aa8a855b23ad0c12cf39d1a18768c857ff6b8cd7af5e2f694525 da4f90ad50df05899bbcb7e9359da4541f989c57602ad2705eef1d561c99cfc3 2b98d9c0d30d09e791ad4dc981a17fa3e48fda7f1dfd68fd037946531e2cf718 97b69d8e0cf55708309c37d332137d10242a201c0dd93d6a513e5038dc139f57 5a28683ee05c11670e17639f4eb99609ac3d665c45d50746e5898d9efdfd4a83 0ccc0fec930917707cf8573f4c5d0845197b95e300f8692757060910e50a1de6

Accenture-Security-Elise-Threat-Analysis.pdf

Report name	Domains	Hosts	Samples
Accenture-Security-Elise-Threat-Analysis.pdf (Click name to open as page)	7g91xhp.envuy3.net 3qyo4o7.7r7i3.info 7sytdjc.wroi.cxy.com hovux.eln9wj7.7gpj.org www.accenture.com ubkv1t.ec0.com accenture.com 4tc3ldw.g9ml.www0.org 38qmk6.0to9.info ipaddress.com dtdf5vu.nt7yq.info	N/A	cfa7954722d4277d26e96edc3289a4ce cd36bbd7f949cf017edba0e6aaadf28c f12fc711529b48bcef52c5ca0a52335a

Cisco'sTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf (Click name to open as page)	daum.net blog.talosintelligence.com artndesign2.cafe24.com mailacounts.com	N/A	e0257d187be69b9bee0a731437bf050d56d213b50a6fd29dd6664e7969f286ef 4f06eaed3dd67ce31e7c8258741cf727964bd271c3590ded828ad7ba8d04ee57 e5f191531bc1c674ea74f8885449f4d934d5f1aa7fd3aaa283fe70f9402b9574

Cisco'sTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf (Click name to open as page)	fox.foxlove.life jo.foxlove.life le.pro eg.foxlove.life ce-update.services ipify.org smyip.com foxlive.life	N/A	c5bfb5118a999d21e9f445ad6ccb08eb71bc7bd4de9e88a41be9cf732156c525 76a9b603f1f901020f65358f1cbf94c1a427d9019f004a99aa8bff1dea01a881 4b03bea6817f0d5060a1beb8f6ec2297dc4358199d4d203ba18ddfcca9520b48 15f5aaa71bfa3d62fd558a3e88dd5ba26f7638bf2ac653b8d6b8d54dc7e5926b e66af059f37bdd35056d1bb6a1ba3695fc5ce333dc96b5a7d7cc9167e32571c5 d49e9fdfdce1e93615c406ae13ac5f6f68fb7e321ed4f275f328ac8146dd0fc1 1176642841762b3bc1f401a5987dc55ae4b007367e98740188468642ffbd474e af7a4f04435f9b6ba3d8905e4e67cfa19ec5c3c32e9d35937ec0546cce2dd1ff 88e4f306f126ce4f2cd7941cb5d8fcd41bf7d6a54cf01b4a6a4057ed4810d2b6

TheUrpageConnectiontoBahamut,ConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf

Report name	Domains	Hosts	Samples
TheUrpageConnectiontoBahamut,ConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf (Click name to open as page)	le.com lesforinfo.pikpro.eu twitck.com nderfeedback.pikrpro.eu pikrpro.eu appswonder.info	N/A	434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd f1a54dca2fdfe59ec3f537148460364fb5d046c9b4e7db5fc819a9732ae0e063

ShamoonReturnstoWipeSystemsinMiddleEast,Europe_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ShamoonReturnstoWipeSystemsinMiddleEast,Europe_McAfeeBlogs.pdf (Click name to open as page)	key8854321.pub	N/A	bf3e0bc893859563811e9a481fde84fe7ecd0684 10411f07640edcaa6104f078af09e2543aa0ca07 df177772518a8fcedbbc805ceed8daecc0f42fed 41f8cd9ac3fb6b1771177e5770537518 43ed9c1309d8bb14bd62b016a5c34a2adbe45943

AnalyzingOilRig'sOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
AnalyzingOilRig'sOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf (Click name to open as page)	jobs.jobvite.com www.reddit.com withyourface.com paloaltonetworks.sharepoint.com er.com	N/A	a5bec7573b743932329b794042f38571dd91731ae50757317bdaf9e820ec8d5e 66d678b097a2245f60f3d95bb608f3958aa0f5f19ca7e5853f38ea79885b9633 7cbad6b3f505a199d6766a86b41ed23786bbb99dab9cae6c18936afdc2512f00 687027d966667780ab786635b0d4274b651f27d99717c5ba95e139e94ef114c3 6719e80361950cdb10c4a4fcccc389c2a26eaab761c202870353fe65e8f954a3 364e2884251c151a29071a5975ca0076405a8cc2bab8da3e784491632ec07f56

Cisco'sTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf (Click name to open as page)	N/A	N/A	ae086350239380f56470c19d6a200f7d251c7422c7bc5ce74730ee8bab8e6283 23e5bb2369080a47df8284e666cac7cafc207f3472474a9149f88c1a4fd7a9b0 5b7c970fee7ebe08d50665f278d47d0e34c04acc19a91838de6a3fc63a8e5630

GoldDragonWidensOlympicsMalwareAttacks,GainsPermanentPresenceonVictims'Systems-McAfee.pdf

Report name	Domains	Hosts	Samples
GoldDragonWidensOlympicsMalwareAttacks,GainsPermanentPresenceonVictims'Systems-McAfee.pdf (Click name to open as page)	inkboom.co.kr byethost7.com www.golddragon.com nid-help-pchange.atwebpages.com ink.inkboom.co.kr 000webhostapp.com braveprince.com	223.194.70.136 200.200.200.13	35e5310b6183469f4995b7cd4f795da8459087a4 bf21667e4b48b8857020ba455531c9c4f2560740 3a0c617d17e7f819775e48f7edefe9af84a1446b 761b0690cd86fb472738b6dc32661ace5cf18893 11a38a9d23193d9582d02ab0eae767c3933066ec 06948ab527ae415f32ed4b0f0d70be4a86b364a5 96a2fda8f26018724c86b275fe9396e24b26ec9e 5e1326dd7122e2e2aed04ca4de180d16686853a7 bc6cb78e20cb20285149d55563f6fdcf4aaafa58 539acd9145befd7e670fe826c248766f46f0d041 6e13875449beb00884e07a38d0dd2a73afe38283 fef671c13039df24e1606d5fdc65c92fbc1578d9 389db34c3a37fd288e92463302629aa48be06e35 615447f458463dc77f7ae3b0a4ad20ca2303027a 71f337dc65459027f4ab26198270368f68d7ae77 7e74f034d8aa4570bd1b7dcfcdfaa52c9a139361 465d48ae849bbd6505263f3323e818ccb501ba88 a9eb9a1734bb84bbc60df38d4a1e02a870962857 4f58e6a7a04be2b2ecbcdcbae6f281778fdbd9f9

OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussia,ExploitingaZero-day-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussia,ExploitingaZero-day-360CoreSecurity.pdf (Click name to open as page)	blogs.360.cn www.p2f.ru	188.241.58.68	f951362ddcc37337a70571d6eae8f122 2abb76d71fb1b43173589f56e461011b 92b1c50c3ddf8289e85cbb7f8eead077 1cbc626abbe10a4fae6abf0f405c35e2

Cisco'sTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf (Click name to open as page)	N/A	N/A	19ab44a1343db19741b0e0b06bacce55990b6c8f789815daaf3476e0cc30ebea 3337e3875b05e0bfba69ab926532e3f179e8cfbf162ebb60ce58a0281437a7ef f188abc33d351c2254d794b525c5a8b79ea78acd3050cd8d27d3ecfc568c2936 ae9a4e244a9b3c77d489dee8aeaf35a7c3ba31b210e76d81ef2e91790f052c85 a7d6dcdf5ca2c426cc6c447cff76834d97bc1fdff2cd14bad0b7c2817408c334 d934cb8d0eadb93f8a57a9b8853c5db218d5db78c16a35f374e413884d915016 ab5bf79274b6583a00be203256a4eacfa30a37bc889b5493da9456e2d5885c7f 3e27b6b287f0b9f7e85bfe18901d961110ae969d58b44af15b1d75be749022c2 28858cc6e05225f7d156d1c6a21ed11188777fa0a752cb7b56038d79a88627cc edb1ff2521fb4bf748111f92786d260d40407a2e8463dcd24bb09f908ee13eb9

UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrick,Formbook,LokiBotandothermalware_Proofpoint.pdf

Report name	Domains	Hosts	Samples
UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrick,Formbook,LokiBotandothermalware_Proofpoint.pdf (Click name to open as page)	jabb3r.org ce.com xmpp.jp viruscheckmate.com test1.ru seliodrones.info scan4you.net www.proofpoint.com reaqta.com blog.0x3a.com cofense.com	N/A	c73c570208059e0a7b712d835c0de1def72d346a0d623508203b3061c63955ff 2bb9d0d8166a8d330cb3c5be6fb60539fe29e05cc3acb4ac7ec3da233fb013ec 53e8890f0d002d9611675419b3d8d0899b599c59f4557e105211d294bf92f023 877da1bc247c3a0406e29f1cbe50e89b6b53f070957b2d34d10a44fca66e6e49 094ec9e51a559f93e920643a1167de6ee966076af6ab89f24143e9e53b6f9e11 5528b7baa2be1b02140378b076efdbb413ea5e7b05541d2be438c6fb7a636dfe 030ce92b54ae176b116b6d1baa4769d0298f7283dcc1632f6184713e7ec8fdee 8e1c6f44b02e72b1c1c9af0ffdcee0fbe67fb8ee370bc67e4e01ec43f8b92ec9

OperationParliament,whoisdoingwhat_-Securelist.pdf

Report name	Domains	Hosts	Samples
OperationParliament,whoisdoingwhat_-Securelist.pdf (Click name to open as page)	N/A	N/A	N/A

Cisco'sTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf

Report name	Domains	Hosts	Samples
Cisco'sTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf (Click name to open as page)	www.1588-2040.co.kr www.dylboiler.co.kr www.korea-tax.info	N/A	3b1395f620e428c5f68c6497a2338da0c4f749feb64e8f12e4c5b1288cc57a1c fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0

'OperationOceansalt'DeliversWaveAfterWave_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
'OperationOceansalt'DeliversWaveAfterWave_McAfeeBlogs.pdf (Click name to open as page)	N/A	N/A	N/A

FSIThreatIntelligenceReport-CampaignDOKKAEBI.pdf

Report name	Domains	Hosts	Samples
FSIThreatIntelligenceReport-CampaignDOKKAEBI.pdf (Click name to open as page)	nabuco.org durihana.com box.com ngonewsi.com com.android mediafire.com nbc1tv.com www.hani.co.kr pcloud.com ingonews.kr ngonews.tv www.rsaconference.com edsi.co.kr durihana.window.gabiauser.com cve.circl.lu nbc1tv.mediaon.co.kr www.spo.go.kr yadex.com com.google.android news.kaspersky.co.kr blog.talosintelligence.com ingo.co.kr news.jtbc.joins.com nabuco2.mediaon.co.kr com.sec.android ngonewstv.com ingonews2.mediaon.co.kr durihana.cafe24.com www.hancom.com help.hancom.com pastebin.com	7.0.4.325	c9e44073df7cfa6321b08acc8c3b7b80fd973d612c9d4274409f8fbcf0bf8d1d a624f9653b005c2e71f1a65ebe4de1f07b6441756ce6219f88eca035948c4682 1a69a862a0fb66af0cfc5dc131e435c3d4677525bf2f2dc3e42d35e68ff4b3a6 982147e4bc64546487129f62205531faa7a425907e383904625891b7f0c18547 2e4b8f1f08983c5e042236ef811c291ee55dc05cb69172fbeafb9367af075ebf 3f19eb0d46bb0d3d250fbef0ee5bc56c7dca8af179526996aec34cc18aa087c3 625c65fcdbfedb39a109767c415f8a9ac897f66a508bf03f1af387ce209fd826 b7e5f9391b12475fdae20c8afd6c2a7ab8e8a4072618e3e1543549f098ffed5f 751d2ed9e56abf3b218dbfd5de88576ee1be4b02760ec6431c18bdf31031086c 4f1dd7c10adee45f7ff13dbffa328afae26448ff39ba6d9ae91dec611705dede b2d8fa4e572663ec325bd467c148181186f734e0807e71195f59933a13d4dcd5 5f2ffd7479763424624986241a8f4cbe1c723b24752a20ae3bc07004da576f16 bab40474b0cff1951e38d49673bb70945d7a7aac7c6c00a28f8591e538ab8ae3 369e8ded9622b92ff153f5d5b073cf838fd3cb68b78addfd236602f34fc6a03e e5e2c90c5f72a920363999b26557dda3b5996e1d7729d769f43dddb62bbb6588 84629c64ced46334b808fc599c66f5edcade9911b252c1ceeef89d0fbc977ad4 d0361adb36e81b038c752ea1a7bdc5517b1e44f82909bc2bd27b77b2652667ee a45c939b1554fb72c1ac10f8cfcdc5b340321de8b06bd1cb6de047f871a1cb9a 929d7806ae63b5e23765cddf7ba78c63fee8a8e9cd191976acabb96febe980ff 19bea7f46f1c9b6fc6d03eabfe334a365d36c405919441f2a1f378bbc7174db9 4bcc34489b45850d086df86c6d12db714a5e6719292d4c30b6c3e93ef0f505f9 bd8fa7793f2192d4ff3979526955d5d6c965218eb0c0fe579f8ef0602357d5a9 a0359a6054ff3b245ca661ef5c51dd605410b946e1f0eff6f6898b2368b0ef7e dcf863227dd5f191cbfd320e7eb142c264f1f5aa94c6d521c4efb0ec17be2385 21e325c059429271d95cefaced02a1a39801926fab9df64535ae13a25a501c01 bded85d7024b6cf86cc9ce45ec851c80cb13790b9c4bd63b0b22b0fb672e9dce cd3f4905d02f9d2db270440ae59bd36e4aba1d750323078c2ea1cc85da129be6 9f6d9673c3ae3e4a5c7f64f5ffdf36b5b5ab97fdc2ebde6fe4eb37d44c1254f0 3a244285b78c8e99b0481339760aef554efe8eb2bff93a93b55740d4ab71421f fac550e331d6bb40ef2683e357b453ce0664ec4beec12e4e8ac71b5fa18f2381 2c8f6fa1cbbf91676b361a2011b6f43d1f1e75b8208f40be2c186ff0f586ca0b 3cfc7666c97c38f38a3b3ec1d132f2836ade7e6e6e3cddb30b0d7d81682de0b2 93cc473e7d3d0c4b018ed0c3cccf2109f7dea7fdd607cb8bb08ede13e086596d a3c9a459ac26e5d4f8f6191b3811e39f3516757a10a7818de6e092be9f646b3d 052ed5ec39c6c45ff42fbca7290d7edc8f3ca465b04211cedcbee66fb7547752 960596ad6ddcb8947e46edb2b7e1c098f37456d932dd3d93516e8d4705d0e81b 8c5b2068f6087b68b923bf0d1ef814e8d68ce767379820f0e9922683d63306bc 9a11b7f45f4f483349cbfebb1b1af512c8a4dd9eda4d9b5154dcb6f22bb0d253 a1c26ce6854b17a6d34d06a241b4a5086e2227c50006c579d65ccdfd7622c6e5 6a436aca00171111e8bb3e66f0ebe48d0cc747f1a04932bb682b1f7494eab9e9 032eda4f49ce866ed23936b03626bc11dd8e1e5b106489220dbf4a9335e9b915 41d3b14170f13def49100fa426cb2f9d3e27dd630acdf78cda8ca2504ca52a48 83d647a2f846fb5456692d9da24e6a89857785cbb273ccb5f7a16055b0c1a257 4ee3b3c45e3bd55613cf6727e000664ddf229a4f133954775e603c511fa3f154 396a684949c96815b54c8e4c2fafbe6324d8c4dde2c9294411658fb5209cd70c f809287e23fbe52dff63702477b7b67dcc877b7fe9db5abe9449cda18644c9de a85e57c55bb33b7fc0009f9c65d9f45a329eff3e92717a9dd099c0fa76fb8be8 9a1320b650bd40b91513ec6555c99e1c164e17ab6b1ea2b66be86658030256cb 800d50e38ebd78c5f11a292a06c9d884ff50fd66d5903e352ed9843fb633de71 596fbdf01557c3ec89b345c57ae5d9a0b7251dd8d5a707f7353dd733274c6eb6 7875614ecd08474662a7aa2a1d8830b9ea7749a997b529c5501c35be4da9cccd db806d0ee7144e8e5eff055cc6bd2c321def2740b11590821d507b6fd369142e 6506c9e239d5f886a9a725bb85f8a95d44dad110f861dcf9481aecf8de2d2ae0 8dc6e8eccaaa9ebe77b60ab364e7a56ba81bb00664485d3090b58286df0ca37c 62a2706b4669ba96ee5eb834ad5ed423442d76cbab7dd5084cec2248f4cd0585 6e531deb2b3a7b54782d44a1ec2f49b9ff463e76e05d44ee85cc104e4a8fb380 21438bf7bb8fd6f06e990b758b2187272ec6c21e6b83193c7c0dce2f60ce4701 6b15a7761443f6a9555c0a6cac41de78e71016d803b726abbb4b0489e8cc323f 0d2c05c0673b42bc934d85435199e1a852e7490f374871f6661c019ed62045f7 0d56c5f20b2da3659f05d613d3faeb41d9e82a45e9161c3b48805ebb7b2730b9 9c907e254f1723b0a32e4fe1d1636ca1d38cb6b654f71d31330fd46292543eca 8db746078b5fb6a363ae609870e69e1261d497417fb23b7170cb8ee81117d12f 171e26822421f7ed2e34cc092eaeba8a504b5d576c7fd54aa6975c2e2db0f824 32407904ef8cf45f7e5e9abd561be451c1eed229d3e92a777d4c2b7efc096898 f068196d2c492b49e4aae4312c140e9a6c8c61a33f61ea35d74f4a26ef263ead 1cc7ad407fc87acb9c961105943c87a7bd77c4d4cc90b84b46fb5dcf779b50fd f9c8548e8e49dce5304d5d60970519631f6231269ab8b1b04acd87ca014cd54a 281828d6f5bd377f91c6283c34896d0483b08ac2167d34e981fbea871893c919 67f90691a42d22a1e95080e8d3af57cb628b38faf9b15881b0e96def6d4605c4 ae5c5f5d9d853231eb120ac66534557bb2dec9cb69370da40eef5bbb026a3ec3 b6f006fa93ac25c11df839195e1b362dc0888f5e71ad726e78de7d7851f1d613 485f77e5d32de5dc05510743025a75af5b6f714e930e22098490b7afb71b737f f3ec8db8b1f52eba733478fbd28debde40650b004b5881f31d6deb3dce6eeada 7e90786ba4eef2b552c745a6b65110908a5ef5c89f68b337d66d75ace020b91b 9b7766b0f7e4b61da87d7283cf65aa2614c2a468024dee980a28ee52ad87cdab a7b7e6f2cc76830a0ed90b50af4f40ed10db73d8a0c3025d0b9131d15c9346bc deefe217500c1bb7e04c09037cf1d7d562927e31abc830694b0f3f995220ae9d eb47dc2d806b15f135a5b766cd3430e10ac6c0319b08f065b655172f87c5e5a4 3e9eab029c52ac34b91f906c8f92ad9059531f825905260023764f8a069edbbf 16a5126924e876b78449ff7eca701fee13105dfa9646de92b4d13142c6f40735 3bfc7bc7d08662ef572008be94e4fa23607a1294c50d9cb610ee79ba61270d25 037430c2ad2601f5a0393601d542c3d7d17a69690cf959bc4ed65fb86b27a15a 834600ec1f01a039d502a5c3f315d7aac4d95554327b19da17fda30b1d57995a d30cb50641ff79fa059fbf1950047d2e34eb3e9ee7b5ff5cced0912160d3edb9 ba08b13577eef393db69a20d9b881bfd18e86ec37690c25cc2931a7b26dbdc6f d9e440d78e9d6d656a52d7dc84f874163d0164db87d350860e766cddec1f10f5 226b3e4f4f3c48ab33e4759da1c025fc79d61aad04c4f761c0c2107bd51ff703 b831a8afafe9d32bb33432607ec88ef44edf4d516c38b95b69b110d7965c9304 c68e996fb9021bb7c316d9d5f9dad9251ec91989152f8908a5ccf1f7e2f581df 19a3e1bf2d8c5410a71358e2a780d10ce705b5076f877703d7ca49801bdc8605 22d42b6a20d655ce3719fab531ddd6812e40fb117a644c4d8cf4a239c1276783 262261a77c4e1f1435d9e9e31207c4664d05645237ed6d17113f6ee38fd6178b

LuckyMousehitsnationaldatacentertoorganizecountry-levelwaterholingcampaign-Securelist.pdf

Report name	Domains	Hosts	Samples
LuckyMousehitsnationaldatacentertoorganizecountry-levelwaterholingcampaign-Securelist.pdf (Click name to open as page)	wh0am1.itbaydns.com google-updata.tk bbs.sonypsps.com windows-updata.tk update.iaacstudio.com	N/A	0d0320878946a73749111e6c94bf1525 22cbe2b0f1ef3f2b18b4c5aed6d7bb79 ac337bd5f6f18b8fe009e45d65a2b09b 04dece2662f648f619d9c0377a7ba7c0

OilRigTargetsaMiddleEasternGovernmentandAddsEvasionTechniquestoOopsIE-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigTargetsaMiddleEasternGovernmentandAddsEvasionTechniquestoOopsIE-PaloAltoNetworksBlog.pdf (Click name to open as page)	jobs.jobvite.com update.com www.reddit.com er.com blog.talosintelligence.com windowspatch.com www.windowspatch.com	N/A	9e8ec04e534db1e714159cc68891be454c2459f179ab1df27d7f89d2b6793b17

PatchworkContinuestoDeliverBADNEWStotheIndianSubcontinent_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
PatchworkContinuestoDeliverBADNEWStotheIndianSubcontinent_PaloAltoNetworks.pdf (Click name to open as page)	s3-us-west-2.amazonaws.com www.forcepoint.com www.webrss.com www.reddit.com pwc.blogs.com feed43.com attack.mitre.org feeds.rapidfeeds.com	N/A	e3e7e71a0b28b5e96cc492e636722f73 dd1876848203d9e10abceec07282ff37 b8abf94017b159f8c1f0746dca24b4eeaf7e27d2ffa83ca053a87deb7560a571 d486ed118a425d902044fb7a84267e92b49169c24051ee9de41327ee5e6ac7c2 290ac98de80154705794e96d0c6d657c948b7dff7abf25ea817585e4c923adb2 07d5509988b1aa6f8d5203bc4b75e6d7be6acf5055831cc961a51d3e921f96bd a67220bcf289af6a99a9760c05d197d09502c2119f62762f78523aa7cbc96ef1 ab4f86a3144642346a3a40e500ace71badc06a962758522ca13801b40e9e7f4a fd8394b2ff9cd00380dc2b5a870e15183f1dc3bd82ca6ee58f055b44074c7fd4 79ad2084b057847ce2ec2e48fda64073

MirageFox_APT15ResurfacesWithNewToolsBasedOnOldOnes-Intezer.pdf

Report name	Domains	Hosts	Samples
MirageFox_APT15ResurfacesWithNewToolsBasedOnOldOnes-Intezer.pdf (Click name to open as page)	buy.healthcare-internet.com www.intezer.com analyze.intezer.com	N/A	c27fb5fd362fdaec2e344564f76197d01e1dc463ee3552b16452fc41e67f2709 cec9c4e48fad6e4c2b7cf4bc34d357893ef878e8be076c9f680f297e06184c20 f633df1fb42666f62eb23fd70dac4e3c0c4908af123f9335f3b58e6ea205df8a b9403fb1e3743617bcdf8c1e5dd332c325c1e1f2e79bef166261fec0091880cf

OngoingAndroidMalwareCampaignTargetsPalestinians-Part1_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
OngoingAndroidMalwareCampaignTargetsPalestinians-Part1_SymantecBlogs.pdf (Click name to open as page)	zee-player.website kristy-milligan.website pastebin.com zee-player.com	N/A	cbf9a0737e27fafafaff5c73825bb96907a976b230bf18843badd7b10d475eb2

OngoingAndroidMalwareCampaignTargetsPalestinians-Part2_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
OngoingAndroidMalwareCampaignTargetsPalestinians-Part2_SymantecBlogs.pdf (Click name to open as page)	com.android	N/A	N/A

SofacyGroup’sParallelAttacks-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
SofacyGroup’sParallelAttacks-PaloAltoNetworksBlog.pdf (Click name to open as page)	supservermgr.com www.reddit.com er.com www.f2ko.de jobs.jobvite.com www.welivesecurity.com	185.25.50.93 1.6.3.8 220.158.216.127 185.25.51.198	d697160aecf152a81a89a6b5a7d9e1b8b5e121724038c676157ac72f20364edc 14331d289e737093994395d3fc412afc dd7e69e14c88972ac173132b90b3f4bfb2d1faec15cca256a256dd3a12b6e75d abbad7acd50754f096fdc6551e728aa6054dcf8e55946f90a02b17db552471ca cba5ab65a24be52214736bc1a5bc984953a9c15d0a3826d5b15e94036e5497df 5b5e80f63c04402d0b282e95e32155b2f86cf604a6837853ab467111d4ac15e2 25f0d1cbcc53d8cfd6d848e12895ce376fbbfaf279be591774b28f70852a4fd8 b6a75b1ef701710d7aeade0fe93de8477f3bd506 115fd8c619fa173622c7a1e84efdf6fed08a25d3ca3095404dcbd5ac3deb1f03 f27836430742c9e014e1b080d89c47e43db299c2e00d0c0801a2830b41b57bc1 85da72c7dbf5da543e10f3f806afd4ebf133f27b6af7859aded2c3a6eced2fd5 8cf3bc2bf36342e844e9c8108393562538a9af2a1011c80bb46416c0572c86ff

TheGorgonGroup_SlitheringBetweenNationStateandCybercrime-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
TheGorgonGroup_SlitheringBetweenNationStateandCybercrime-PaloAltoNetworksBlog.pdf (Click name to open as page)	t2m.io jobs.jobvite.com www.reddit.com umarguzardijye.com nvd.nist.gov onedrivenet.xyz panelonetwothree.ml guelphupholstery.com cargo.com stevemikeforce.com 360.net panelonetwothree.ga www.stemtopx.com diamondfoxpanel.ml bit.ly arynews.tv france.cf day.us er.com stemtopx.com ngpanel.gq lokipanelhostingpanel.gq zupaservices.info reforce.info paper.com www.a1vbcode.com fudpages.ru www.asaigoldenrice.com asaigoldenrice.com fudpage.ru	115.186.136.237	db4d8d931f1b979cf32d311f9b03e851d3283b4f7e86252730247da25cf9f093 806098afc2148dabb838b24c4dfaa148269ac3ddf769aee54e75d46bfef0c506 bf37d6cb393b440f790ad2b333624fde079e10bfaeb44d65188e3ccc551c982f 81de431987304676134138705fc1c21188ad7f27edf6b77a6551aa693194485e 4e4967e3d39256049bc1054b966e5c609245fd3b2a934fda5cd1885526d8221e 5e805a88294f6d25d55103d19d13e798e01ad70e6b89e9c58db5d468cc63b3d5 446e1c80102c8b9662d66d44525cb9f519369061b02446e0d4cd30cd26d79a25 690fc694b0840dbabb462ae46eb836777420b3354e53a6944a2e169b965b0bec a100ce0a67c5890bcc38d2b6e30f9164dfe266126ec40a2fd7eb8e941dc7d025 84ed59953f57f5927b9843f35ca3c325155d5210824d3b79b060755827b51f72

OilRigUsesUpdatedBONDUPDATERtoTargetMiddleEasternGovernment-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigUsesUpdatedBONDUPDATERtoTargetMiddleEasternGovernment-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.reddit.com withyourface.com jobs.jobvite.com reeye.com er.com	99.250.250.199	d5c1822a36f2e7107d0d4c005c26978d00bcb34a587bd9ccf11ae7761ec73fb7 c0018a2e36c7ef8aa15b81001a19c4127ad7cd21ae410c1f854e5dadfa98b322 7cbad6b3f505a199d6766a86b41ed23786bbb99dab9cae6c18936afdc2512f00

UpdateonPawnStorm-NewTargetsandPoliticallyMotivatedCampaigns_Trend_Micro.pdf

Report name	Domains	Hosts	Samples
UpdateonPawnStorm-NewTargetsandPoliticallyMotivatedCampaigns_Trend_Micro.pdf (Click name to open as page)	adfs-senate.services fil-luge.com mail-ibu.eu chmail.ir adfs-senate.email fisski.ca iihf.eu adfs.senate.qov.info biathlovvorld.com chmail.ir.udelivered.tk webmail-ibsf.org	N/A	N/A

TritonMalwareSpearheadsLatestGenerationofAttacksonIndustrialSystems_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
TritonMalwareSpearheadsLatestGenerationofAttacksonIndustrialSystems_McAfeeBlogs.pdf (Click name to open as page)	www.midnightbluelabs.com cyberx-labs.com vimeo.com blog.talosintelligence.com www.nozominetworks.com blog.schneider-electric.com reeye.com	N/A	dc81f383624955e0c0441734f9f1dabfe03f373c 6c09fec42e77054ee558ec352a7cd7bd5c5ba1b0 2262362200aa28b0eead1348cb6fda3b6c83ae01 f403292f6cb315c84f84f6c51490e2e8cd03c686 d6e997a4b6a54d1aeedb646731f3b0893aee4b82 b47ad4840089247b058121e95732beb82e6311d0 66d39af5d61507cf7ea29e4b213f8d7dc9598bed 1dd89871c4f8eca7a42642bf4c5ec2aa7688fd5c a6357a8792e68b05690a9736bc3051cba4b43227

SupplyChainAttackOperationRedSignatureTargetsSouthKoreanOrganizations-TrendLabsSecurityIntelligenceBlog.pdf

Report name	Domains	Hosts	Samples
SupplyChainAttackOperationRedSignatureTargetsSouthKoreanOrganizations-TrendLabsSecurityIntelligenceBlog.pdf (Click name to open as page)	N/A	N/A	c14ea9b81f782ba36ae3ea450c2850642983814a0f4dc0ea4888038466839c1e 4ae4aed210f2b4f75bdb855f6a5c11e625d56de2 52374f68d1e43f1ca6cd04e5816999ba45c4e42eb0641874be25808c9fe15005 bcfacc1ad5686aee3a9d8940e46d32af62f8e1cd1631653795778736b67b6d6e 279cf1773903b7a5de63897d55268aa967a87f915a07924c574e42c9ed12de30 e530e16d5756cdc2862b4c9411ac3bb3b113bc87344139b4bfa2c35cd816e518 e5029808f78ec4a079e889e5823ee298edab34013e50a47c279b6dc4d57b1ffc a3a1b1cf29a8f38d05b4292524c3496cb28f78d995dfb0a9aef7b2f949ac278b 9415ca80c51b2409a88e26a9eb3464db636c2e27f9c61e247d15254e6fbb31eb 0703a917aaa0630ae1860fb5fb1f64f3cfb4ea8c57eac71c2b0a407b738c4e19 28c5a6aefcc57e2862ea16f5f2ecb1e7df84b68e98e5814533262595b237917d

DNSMessengerPowerShellMalwareAnalysis.pdf

Report name	Domains	Hosts	Samples
DNSMessengerPowerShellMalwareAnalysis.pdf (Click name to open as page)	www.sentinelone.com	N/A	340795d1f2c2bdab1f2382188a7b5c838e0a79d3f059d2db9eb274b0205f6981

ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally«ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally_.pdf

Report name	Domains	Hosts	Samples
ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally«ChineseEspionageGroupTEMP.PeriscopeTargetsCambodiaAheadofJuly2018ElectionsandRevealsBroadOperationsGlobally_.pdf (Click name to open as page)	en.freshnewsasia.com iric.gov.kh partyforumseasia.com scsnewstoday.com mlcdailynews.com chemscalere.com atimes.com reeye.com	112.66.188.28	217d40ccd91160c152e5fce0143b16ef e413b45a04bf5f812912772f4a14650f 5d6ad552f1d1b5cfe99ddb0e2bb51fd7 cf027a4829c9364d40dcab3f14c1f6b7 ba1e5b539c3ae21c756c48a8b5281b7e c8fdd2b2ddec970fa69272fdf5ee86cc 3c51c89078139337c2c92e084bb0904c

ComnieContinuestoTargetOrganizationsinEastAsia_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
ComnieContinuestoTargetOrganizationsinEastAsia_PaloAltoNetworks.pdf (Click name to open as page)	www.dt.co.kr www.reddit.com itsmonsee.tumblr.com allworldnewsway.blogspot.com blogspot.com tumbler.com	121.126.211.94 113.196.70.11	316a0c6849f183a1a52d0c7648e722c4ca85bd57b0804a147c0c8656b84bbdb9 0e8a4e4d5ca501bad25a730fb5de534fa324c6ac23e0a573524693f2d996d105 e06b797a24fa03a77e0d5f11b0cf0f4f038e0a9ea04d4981d39148969349c79c c8951038fd53321661274e5a12532c3fb6f73c75fd75503a1089c56990658fef 7282d0709449abe16457864f58157cac8d007571dc5d463d393d1ae2605d17e0 29ed6eb3c882b018c2bb6bf2f8eb15069dc5510ca119abebf24f09e3c91f10aa 18ec68e1bd9b11f22e481d48c415f8d80edb76e9032ba4e1d31d87e16eed9959 48a1ce103e5bf47c47cc5ed40b2dc687ebaf3674d667419287bcb1d0b8d8dda6 bf6ee8426245b167a69292e513c0841d818b310dda87daea649221f4e0afd1b3 eed5945c36ba22a2531dd2d9dd7bc4e17e68544d512be75670919caf287c1b4a 62b98dde60cb4dd0d0088bde222c5c2c4c92560cccf4753f1ce94e044093ab85 639a49390c6f8597d36ec0bd245efa1b4a078c0506fb515e577a40389b39a614 8026442b812469e48ccd11611ab6eacdcb312a8f1aabd563b7f4cb4868315e16 756952652290ad09fe03c8674d44eab2077b091398187c3abcb6f1ddc462c32d

PoisonIvyGroupandtheCyberespionageCampaignAgainstChineseMilitaryandGoverment-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
PoisonIvyGroupandtheCyberespionageCampaignAgainstChineseMilitaryandGoverment-360CoreSecurity.pdf (Click name to open as page)	ps1688.webhop.org dns.net ssy.ikwb.com moneyaaa.beijingdasihei.com kav2011.mooo.com teacat.https443.org javainfo.upgrinfo.com xinhua.redirectme.net blogs.360.cn aliago.dyndns.dk pouhui.diskstation.org babana.wikaba.com mailsends.sendsmtp.com news.xinhuanet.com check.blogdns.com soagov.zapto.org china.serveblog.net www.safe360.dns05.com jerry.jkub.com 126mailserver.serveftp.com svcsrset.ezua.com comehigh.mefound.com zhqopin.mynumber.org waterfall.mynumber.org safe360.dns05.com tong.wikaba.com office.go.dyndns.org rising.linkpc.net wwwdo.tyur.acmetoy.com gaewaa.upgrinfo.com mp3.dnset.com www.ssy.ikwb.com uswebmail163.sendsmtp.com backaaa.beijingdasihei.com soasoa.sytes.net bearingonly.rebatesrule.net zxcv201789.dynssl.com givemea.ygto.com updates.lflink.com jason.zyns.com goldlion.mefound.com ssy.mynumber.org gugupd.008.net chinamil.lflink.com mail.sends.sendsmtp.com as1688.webhop.org soagov.sytes.net kouwel.zapto.org pps.longmusic.com annie165.zyns.com netlink.vizvaz.com www.tong.wikaba.com givemeaaa.upgrinfo.com auth.kanbox.com fevupdate.ocry.com canberk.gecekodu.com officepatch.dnset.com l63service.serveuser.com hyssjc.securitytactics.com cluster.safe360.dns05.com geiwoaaa.qpoe.com webupdate.dnsrd.com access.webplurk.com www.service.justdied.com gaewaaa.upgrinfo.com usa08.serveftp.net mediatvset.no microsoftword.serveuser.com ip.org bt0116.servebbs.net laizaow.mefound.com updateinfo.servegame.org localhosts.ddns.us motices.ourhobby.com music.net wmiaprp.ezua.com emailser163.serveusers.com operater.solaris.nu mail163.mypop3.net guliu2008.9966.org sandy.ourhobby.com ceepitbj.servepics.com	131.213.66.10 165.227.220.223 45.76.228.61 188.166.67.36 146.0.32.168 45.32.8.137 45.76.125.176	27f683baed7b02927a591cdc0c850743 0e80fca91103fe46766dcb0763c6f6af 2a96042e605146ead06b2ee4835baec3 5e4c2fbcd0308a0b9af92bf87383604f a8417d19c5e5183d45a38a2abf48e43e b244cced7c7f728bcc4d363f8260090d 3e12538b6eaf19ca163a47ea599cfa9b 26d7f7aa3135e99581119f40986a8ac3 1ab54f5f0b847a1aaaf00237d3a9f0ba 4e57987d0897878eb2241f9d52303713 9f9a24b063018613f7f290cc057b8c40 76782ecf9684595dbf86e5e37ba95cc8 f27a9cd7df897cf8d2e540b6530dceb3 2c405d608b600655196a4aa13bdb3790 ec7e11cfca01af40f4d96cbbacb41fed 5696bbee662d75f9be0e8a9ed8672755 2579b715ea1b76a1979c415b139fdee7 fccb13c00df25d074a78f1eeeb04a0e7 e07ca9f773bd772a41a6698c6fd6e551 d12099237026ae7475c24b3dfb5d18bc 3484302809ac3df6ceec857cb4f75fb1 28e4545e9944eb53897ee9acf67b1969 250c9ec3e77d1c6d999ce782c69fc21b 7639ed0f0c0f5ac48ec9a548a82e2f50 1aca8cd40d9b84cab225d333b09f9ba5 bfb9d13daf5a4232e5e45875e7e905d7 168365197031ffcdbe65ab13d71b64ec 36c23c569205d6586984a2f6f8c3a39e 5f1a1ff9f272539904e25d300f2bfbcc dde2c03d6168089affdca3b5ec41f661 ae004a5d4f1829594d830956c55d6ae4 c8755d732be4dc13eecd8e4c49cfab94 7c498b7ad4c12c38b1f4eb12044a9def ca663597299b1cecaf57c14c6579b23b f1b6ed2624583c913392dcd7e3ea6ae1 95f0b0e942081b4952e6daef2e373967 41c7e09170037fafe95bb691df021a20 30866adc2976704bca0f051b5474a1ee a73d3f749e42e2b614f89c4b3ce97fe1 f0c29f89ffdb0f3f03e663ef415b9e4e e9a9c0485ee3e32e7db79247fee8bba6 f29abd84d6cdec8bb5ce8d51e85ddafc c8fd2748a82e336f934963a79313aaa1 81232f4c5c7810939b3486fa78d666c2 bd4b579f889bbe681b9d3ab11768ca07 a807486cfe05b30a43c109fdb6a95993 07561810d818905851ce6ab2c1152871 fb427874a13f6ea5e0fd1a0aec6a095c eff88ecf0c3e719f584371e9150061d2 1396cafb08ca09fac5d4bd2f12c65059 e2e2cd911e099b005e0b2a80a34cfaac d61c583eba31f2670ae688af070c87fc cda1961d63aaee991ff97845705e08b8 bd2272535c655aff1f1566b24a70ee97 adc3a4dfbdfe7640153ed0ea1c3cf125 611cefaee48c5f096fb644073247621c 67d5f04fb0e00addc4085457f40900a2 8abb22771fd3ca34d6def30ba5c5081c 382132e601d7a4ae39a4e7d89457597f 6ca3a598492152eb08e36819ee56ab83 9b925250786571058dae5a7cbea71d28 b301cd0e42803b0373438e9d4ca01421 b0be3c5fe298fb2b894394e808d5ffaf 45e983ae2fca8dacfdebe1b1277102c9 aa57085e5544d923f576e9f86adf9dc0 accb53eb0faebfca9f190815d143e04b 0fb92524625fffda3425d08c94c014a1 7deeb1b3cce6528add4f9489ce1ec5d6 81e1332d15b29e8a19d0e97459d0a1de 1374e999e1cda9e406c19dfe99830ffc c31549489bf0478ab4c367c563916ada 6a37ce66d3003ebf04d249ab049acb22 2b5ddabf1c6fd8670137cade8b60a034 5ee2958b130f9cda8f5f3fc1dc5249cf f3ed0632cadd2d6beffb9d33db4188ed 31c81459c10d3f001d2ccef830239c16 9bcb41da619c289fcfdf3131bbf2be21 517c81b6d05bf285d095e0fd91cb6f03 1dc61f30feeb60995174692e8d864312 03d762794a6fe96458d8228bb7561629 785b24a55dd41c94060efe8b39dc6d4c acc598bf20fada204b5cfd4c3344f98a 0595f5005f237967dcfda517b26497d6 fbd0f2c62b14b576f087e92f60e7d132

ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies-Intezer.pdf

Report name	Domains	Hosts	Samples
ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies-Intezer.pdf (Click name to open as page)	www.intezer.com mtn.co.kr www.operationblockbuster.com analyze.intezer.com blog.talosintelligence.com reeye.com baesystemsai.blogspot.com	N/A	N/A

Shamoon3_ModifiedOpen-SourceWiperContainsVersefromtheQuran-Unit42.pdf

Report name	Domains	Hosts	Samples
Shamoon3_ModifiedOpen-SourceWiperContainsVersefromtheQuran-Unit42.pdf (Click name to open as page)	N/A	N/A	c3ab58b3154e5f5101ba74fccfd27a9ab445e41262cdf47e8cc3be7416a5904f 35ceb84403efa728950d2cc8acb571c61d3a90decaf8b1f2979eaf13811c146b 391e7b90bf3f0bfeb2c2602cc65aa6be4dd1c01374b89c4a48425f2d22fe231c e5bf756d5530ec38ff649b901b3c7506f8556821d979bdcb392237f2ff40daf8 5257f623270b4c5cc471ff35b1bfeec80ab37c7e012da76b50ebd2c4911a43d0 5203628a89e0a7d9f27757b347118250f5aa6d0685d156e375b6945c8c05eb8a 0694bdf9f08e4f4a09d13b7b5a68c0148ceb3fcc79442f4db2aa19dd23681afe d9e52663715902e9ec51a7dd2fea5241c9714976e9541c02df66d1a42a3a7d2a 0266be9130bdf20976fc5490f9191edaafdae09ebe45e74cd97792412454bf0d

NewThreatActorGroupDarkHydrusTargetsMiddleEastGovernment-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewThreatActorGroupDarkHydrusTargetsMiddleEastGovernment-PaloAltoNetworksBlog.pdf (Click name to open as page)	ns103.kaspersky.host cisc0.net kaspersky.host 0utl00k.net www.reddit.com ns102.kaspersky.host owa365.bid er.com www.clearskysec.com msdncss.com kaspersky.science 0ffiice.com maccaffe.com 0utlook.bid hotmai1.com jobs.jobvite.com 0ffice.com micrrosoft.net allexa.net	195.154.41.150 94.130.88.9	ad3fd1571277c7ce93dfbd58cee3b3bec84eeaf6bb29a279ecb6a656028f771c a547a02eb4fcb8f446da9b50838503de0d46f9bb2fd197c9ff63021243ea6d88 ce84b3c7986e6a48ca3171e703e7083e769e9ced1bbdd7edf8f3eab7ce20fd00 cf9b2b40ac621aaf3241ff570bd7a238f6402102c29e4fbba3c5ce0cb8bc25f9 b5cfaac25d87a6e8ebabc918facce491788863f120371c9d00009d78b6a8c350 ff0b59f23630f4a854448b82f1f0cd66bc4b1124a3f49f0aecaca28309673cb0 cc1966eff7bed11c1faada0bb0ed0c8715404abd936cfa816cef61863a0c1dd6 36862f654c3356d2177b5d35a410c78ff9803d1d7d20da0b82e3d69d640e856e 9eac37a5c675cd1750cd50b01fc05085ce0092a19ba97026292a60b11b45bf49 99541ab28fc3328e25723607df4b0d9ea0a1af31b58e2da07eff9f15c4e6565c cec36e8ed65ac6f250c05b4a17c09f58bb80c19b73169aaf40fa15c8d3a9a6a1 776c056096f0e73898723c0807269bc299ae3bbd8e9542f0a1cbba0fd3470cb4 d393349a4ad00902e3d415b622cf27987a0170a786ca3a1f991a521bff645318 dd2625388bb2d2b02b6c10d4ee78f68a918b25ddd712a0862bcf92fa64284ffa 870c8b29be2b596cc2e33045ec48c80251e668abd736cef9c5449df16cf2d3b8 6dcb3492a45a08127f9816a1b9e195de2bb7e0731c4e7168392d0e8068adae7a 26e641a9149ff86759c317b57229f59ac48c5968846813cafb3c4e87c774e245 cf7863e023475d695c6f72c471d314b8b1781c6e9087ff4d70118b30205da5f0 0b1d5e17443f0896c959d22fa15dadcae5ab083a35b3ff6cb48c7f967649ec82 c8b3d4b6acce6b6655e17255ef7a214651b7fc4e43f9964df24556343393a1a3 8063c3f134f4413b793dfc05f035b6480aa1636996e8ac4b94646292a5f87fde 47b8ad55b66cdcd78d972d6df5338b2e32c91af0a666531baf1621d2786e7870 0a3d5b2a8ed60e0d96d5f0d9d6e00cd6ab882863afbb951f10c395a3d991fbc1 01fd7992aa71f4dca3a3766c438fbabe9aea78ca5812ab75b5371b48bd2625e2 ac7f9c536153780ccbec949f23b86f3d16e3105a5f14bb667df752aa815b0dc4 bf925f340920111b385078f3785f486fff1096fd0847b993892ff1ee3580fa9d e88045931b9d99511ce71cc94f2e3d1159581e5eb26d4e05146749e1620dc678 b2571e3b4afbce56da8faa726b726eb465f2e5e5ed74cf3b172b5dd80460ad81 d428d79f58425d831c2ee0a73f04749715e8c4dd30ccd81d92fe17485e6dfcda

Android_TimpDoorTurnsMobileDevicesIntoHiddenProxies_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
Android_TimpDoorTurnsMobileDevicesIntoHiddenProxies_McAfeeBlogs.pdf (Click name to open as page)	blog.checkpoint.com 800notes.com ndwhocallsyou.com	199.192.19.18	N/A

SofacyAttacksMultipleGovernmentEntities_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
SofacyAttacksMultipleGovernmentEntities_PaloAltoNetworks.pdf (Click name to open as page)	hotfixmsupload.com www.janes.com www.reddit.com www.shellntel.com isc.sans.edu pan-unit42.github.io noticeofpleadings.com cdnverify.net www.welivesecurity.com ihsmarkit.com attack.mitre.org	N/A	ff808d0a12676bfac88fd26f955154f8884f2bb7c534b9936510fd6296c543e8 23411bb30042c9357ac4928dc6fca6955390361e660fec7ac238bbdcc8b83701 12e6642cf6413bdf5388bee663080fa299591b2ba023d069286f3be9647547c8 cb85072e6ca66a29cb0b73659a0fe5ba2456d9ba0b52e3a4c89e86549bc6e2c7

SofacyContinuesGlobalAttacksandWheelsOutNew‘Cannon’Trojan-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
SofacyContinuesGlobalAttacksandWheelsOutNew‘Cannon’Trojan-PaloAltoNetworksBlog.pdf (Click name to open as page)	post.cz jobs.jobvite.com schemas.openxmlformats.org www.reddit.com er.com pop.seznam.cz	200.122.181.25 188.241.58.170	6ad3eb8b5622145a70bec67b3d14868a1c13864864afd651fe70689c95b1399a fc69fb278e12fc7f9c49a020eff9f84c58b71e680a9e18f78d4e6540693f557d 2cfc4b3686511f959f14889d26d3d9a0d06e27ee2bb54c9afb1ada6b8205c55f af77e845f1b0a3ae32cb5cfa53ff22cc9dae883f05200e18ad8e10d7a8106392 61a1f3b4fb4dbd2877c91e81db4b1af8395547eab199bf920e9dd11a1127221e f1e2bceae81ccd54777f7862c616f22b581b47e0dda5cb02d0a722168ef194a5

RussianArmyExhibitionDecoyLeadstoNewBISKVITMalware.pdf

Report name	Domains	Hosts	Samples
RussianArmyExhibitionDecoyLeadstoNewBISKVITMalware.pdf (Click name to open as page)	secured-links.org bigboss.x24hr.com	N/A	a87daccbb260c5c68aaac3fcd6528f9ba16d4f284f94bc1b6307bbb3c6a2e379 083c57797944468895820bf711e3624f b4a1f0603f49db9eea6bc98de24b6fc0034f3b374a00a815b5c906041028ddf3 be7459722bd25c5b4d57af0769cc708ebf3910648debc52be3929406609997cf 534faf1cb8c04dc881a3fbd69d4bc762 23a286d14de1f51c5073caf0fd40a7636c287f578f32ae5e05ed331741fde572

NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign«NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign«NotSoCozy_AnUncomfortableExaminationofaSuspectedAPT29PhishingCampaign_FireEyeInc.pdf (Click name to open as page)	northshorehealthgm.org pandorasong.com tutanota.com www.jmj.com eforms.state.gov reeye.com	95.216.59.92	16bbc967a8b6a365871a05c74a4f345b 3fccf531ff0ae6fedd7c586774b17a2d 2b13b244aafe1ecace61ea1119a1b2ee 658c6fe38f95995fa8dc8f6cfe41df7b 313f4808aa2a2073005d219bc68971cd 6ed0020b0851fb71d5b0076f4ee95f3c f713d5df826c6051e65f995e57d6817d

OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation«OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation«OntheHuntforFIN7_PursuinganEnigmaticandEvasiveGlobalCriminalOperation_FireEyeInc.pdf (Click name to open as page)	cnmah.pw ppdx.pw xhqd.pw ns5.biz qznm.pw orfn.com guopksl.com mjut.pw odyr.us bwuk.club ooep.pw travel.com mx.ru ivcm.club olgw.my kjke.pw dlox.pw checker.com vpuo.pw pafk.us gov.com wruj.club fisrdteditionps.com mvzo.pw onokder.com futh.pw odwf.pw turp.pw stion.com pvze.club pbbk.us neartsay.com ns5.pw ufyb.club oof.pw firstprolvdrec.com xnlz.club coec.club vxwy.pw googlesr5.com fhyi.club media.com vxqt.us bk.ru kbep.pw rdnautomotiv.biz chenstravelconsulting.com otzd.pw vwcq.us glavpojdfde.com grij.us newuniquesolutions.com hoplessinples.com bvyv.club kalavadar.com rmbs.club ns0.space soru.pw hippsjnv.com palj.us googleapi.com ssls.com kuyarr.com reld.info idjb.us ldzp.pw zody.pw bwwrvada.com nwrr.pw tsrs.pw sll1.com voievnenibrinw.com oknz.club wvzu.pw usdepartmentofrevenue.com dtxf.pw mfka.pw bpee.pw vqba.info xnmy.com nroq.pw lvrm.pw gnoa.pw olckwses.com hilertonv.com cjsanandreas.com hilopser.com luckystartwith.com pgnb.net zugh.us eter.pw auyk.club blopsadmvdrl.com hopsl3.com vikppsod.com wein.net ckwl.pw dyiud.com bipismol.com travels.com oneliveforcopser.com yomd.pw ctxdns.pw hvzr.info blopsdmvdrl.com twfl.us vpua.pw bureauofinspections.com facs.pw media.net nevaudio.com government.com security.com rtopsmve.com west.com jipdfonte.com ueox.club koldsdes.com goproders.com oxrp.info ssl.com ns0.website vjro.club rescsovwe.com simplewovmde.com johsimsoft.org pdoklbr.com ekb.ru combisecurity.com viebvbiiwcw.com muedandubai.com yodq.pw googls.com bcleaningservice.com zjav.us flowerprosv.com mvze.pw bnrnboerxce.com sprngwaterman.com tours.com moopisndvdvr.com partnersind.biz mxtxt.net kjko.pw usa.com bipovnerlvd.com mxfg.pw bconsult.com kiposerd.com deals.com mjet.pw wedogreatpurchases.com aloqd.pw ns1.website hoplessinple.com lawfirm.com provnkfexxw.com jimw.club fkij.net eady.club wqiy.info proslr3.com gxhp.top firsthotelgroup.com proverslokv4.com whily.pw dpoo.pw cuuo.us dosdkd.mo ddmd.pw widermachinery.com ydvd.net construction.com financial.com simpelkocsn.com zdqp.pw mail.qefg.info muhh.us ooyh.us bigrussianbss.com ntlw.net trustbankinc.com jersetl.com uwqs.club kiprovolswe.com oyaw.club yedq.pw oloqd.pw lvxf.pw gjcu.pw googles4.com plusmarketingagency.com doof.pw dlex.pw qefg.info algew.me mtxf.com lhlv.club ns4.space zmyo.club qdtn.us redtoursuk.org myspoernv.com ns1.press okiq.pw dvso.pw mjot.pw swio.pw dsud.com dnstxt.net vkpo.us yamd.pw prideofhume.com wnzg.us mut.pw pronvowdecee.com yqox.pw strideindustrialusa.com ctxdns.org kwoe.us kashtanspb.ru mkwl.pw marketing.com dnstxt.org hijrnataj.com anselbakery.com googleservice.com p3marketing.org strideindustrial.com essentialetimes.com qsez.club mewt.us jiposlve.com zrst.com apvo.club wuc.pw zjvz.pw josephevinchi.com manufacturing.com daskd.me mars.ru lgdr.com rnkj.pw qlpa.club fbjz.pw ysxy.pw tijm.pw cspg.pw strideindastry.biz revitaltravel.com ns3.space sgvt.pw enuv.club cgqy.us pjpi.com fisrteditionps.com widermachinery.biz cloo.com gjuc.pw ihrs.pw viebsdsccscw.com ns2.press withlucky.com melitravel.ru reeye.com dewifal.com wfsv.us cnkmoh.pw dbxa.pw cnlu.net pdokls3.com extmachine.biz amhs.club kiprovol.com fredbanan.com citizentravel.biz maofmdfd5.com deliciouswingsny.com prostelap3.com gnsn.us rzzc.pw stel.com manchedevs.org jblz.net zcnt.pw earth.com neverfaii.com	5.149.252.144 89.223.30.99 31.184.234.66 198.100.119.7 198.100.119.6 195.133.48.65 31.148.220.215 194.165.16.113 85.93.2.73 85.93.2.56 31.148.219.141 85.93.2.149 85.93.2.148 179.43.140.82 162.244.32.175 179.43.140.85 119.81.178.100 179.43.160.162 5.149.250.235 185.86.151.175 94.140.120.132 94.140.120.134 91.235.129.251 31.184.234.71 46.161.3.23 198.100.119.28 185.17.121.200 31.148.219.18 95.46.45.128 217.23.155.19 5.149.253.126 5.8.88.64 185.220.35.20 95.215.46.70 95.215.46.76 8.28.175.68 179.43.160.215 23.249.162.161 5.135.73.113 81.17.28.118 195.54.162.245 179.43.147.71 195.133.49.73 5.188.10.248 95.215.45.95 194.165.16.134 195.54.162.79 85.93.2.111 81.177.27.41 185.180.197.20 185.5.248.167 162.244.32.168 94.140.120.122 85.93.2.92 185.66.15.50 31.148.219.44 95.215.46.229 195.54.162.237 5.149.250.241 185.180.197.34	3917028799d2aa3a43ec5bad067e99a5 03e85ad4217775906e6b5ceae8dc27af 70345aa0b970e1198a9267ae4532a11b e2a6b351c276d02d71e18cd0677e8236 2d36634974c85eff393698b39edc561c 6a5a42ed234910121dbb7d1994ab5a5e c6ec176592ea26c4ee27974273e592ff 560e72858ee413d7a6f72fff5ab7577b 3a303f02e16d7d27fa78c3f48a55d992 74165408ff12d195fb9d68afe0a6011e faed087e820cad3c023be1db8d4ba70a c0d122bcdcb6ede7fc7f1182e4d0e599 e17fe2978ebe1b0a6923acd2ffeda3c2 9788b3faa29ba9eb4cae46f3c249937e 80b022b39d91527f6ae5b4834d7c8173 37759603c6cd91ebc8a1ea9ac0f2d580 793511c86a0469d579ff8cc99a7311e3 619aa4e6c9db275381ab0e7fc7078f5f ecd8879702347966750c37247ef6c2e6 5a0b796c7a6040e02c822cac4475f11a 6fff1d68203f8d23ccd23507ba00b9df 17fabe288d640476a70154c59d5a1ba1 99975b5ee2ddd31e89c9bdda7a3871d9 5dace5ac5ba89c9bba4479264f75b2b6 82a32d98e68891625b6de67a9d0b61c6 aaf42acedc38565f4c33cfdbb09733b9 8bd798e89d075827cc757b9586f15ce2 d7ca38e21327541787ab84bde83d7f81 af53db730732aa7db5fdd45ebba34b94 e9154e2f80389b853ab4cf2fe98f1ed2 188f261e5fca94bd1fc1edc1aafee8c0 24fab1e9831e57307d17981abaabf960 b14bc8cbc7f2d36179ebff96ade6d867 dc8b30c5253f02a790a31f2853fe41f8 6ff3272cd9edf115230bad6a55cb3ca8 2dc0f4bece10759307026d90f585e006 5972597b729a7d2853a3b37444e58e01 bb1a76702e2e7d0aa23385f24683d214 cf4ccb3707e5597969738b4754782e4d c5e94d973ed4f963ddc09ab88def3b5f 80eed9f87a18b0093eb3f16fa495b6f7 e020668055eb1d22710aa07f72860075 5d49b444734b003b6917b81f0a779b3e 79628a598303692238cc4aeb19da6fed 853a53419d9dbc606d2392b99e60c173 a5f75333d0c81387a5a9c7696b967a20 1f5022a02c82fbe414dc91bf3f1b5180 f74958adcfb11abcb37e043013f6a90f c6cddc475d62503a17a34419918e7fc0 3c0bd71e91e0f18621ba43de4419f901 291a17814d5dbb5bce5b186334cde4b1 0d6619481cfd29791a51ebb42ace5c03 402c34d7d6ce92bf5a048023bd2fde4a f20328b49ec605fd425ed101ff31f14b 973377e27b5dffa289f84e62a6833ebc 302ab8bd6a8effa58a675165aa9600a2 b5829caad7c448c558cb1dab2d9f4320 511af2b4c62fa4c2bb91f3be1ca96094 edc4f02f265a4aaa552435f293409f01 67c9bfd4d6ac397fb0cd7da2441a6fe2 70f0f8db551dd6b084682188c3923e26 be1154e38df490e1dcbde3ffb2ebd05c 06b9e2fdd2c0eeb78b851c93ca66f25f 63241a3580cd1135170b044a84005e92 d04b6410dddee19adec75f597c52e386 749c5085cda920e830cfed32842ba835 189c5a090d2b3b87ab65a8b156cd971e c517f48bf95a4f3ecba2046d12e62c88 6e9408c338e98a8bc166a8d4f8264019 dad8ebcbb5fa6721ccad45b81874e22c 7b2315ff1f2d763857aa70ad34b75449 effdaf7f61acb277ac44ee4d9bc8900a de50d41d70b8879cdc73e684ad4ebe9f 4bf691809224d17e49cebb071d22a867 90f35fd205556a04d13216c33cb0dbe3 8ae284d547bd1b8bd6bc2431735f9142 1fbe77a3b5771ce4f95e02a49c5b7f30 52cf6a63da29331d805a5a9b5015580f b5cc86726ab8f1fb3c281ab8f935260f 1a6c18967f4ce1c91c77098af4957e6e 0e0a51489054529a9dcb177d39f08b81 1a9e113b2f3caa7a141a94c8bc187ea7 9b87f9f6498c241f50208f9906907195 cea2989309ccd5128f437335622978f1 47111e9854db533c328ddbe6e962602a dd4f312c7e1c25564a8d00b0f3495e24 4b783bd0bd7fcf880ca75359d9fc4da6 fbf653b89a0814f515ddbdcf82cc3795 307a9ce257e97189e046fa91d3c27dab 754fc509328af413d93131e65fc46d31 94771bcf572d5c0b834f73d577f06cc8 2abad0ae32dd72bac5da0af1e580a2eb 6ac5ae6546746e3a9502cc489b71146e ddc9b71808be3a0e180e2befae4ff433 1f98c4ff12fc2c6fbf8247a5b2e4e7f4 facd37cd76989f45088ae98de8ed7aa0 76eb6f124fba6599a54e92b829c55b63 c8b8420d1503ae48ff35362f5d29eeb3 40c4c02d1e506a5ffc2939ec0ee8e105 fc661e18137583dc140e201338582a99 6146a18570e134c6c32633aca14375fb 7bd2235f105dee20825b4395a04892bf 8fa8d4c30429c099dc7e565e57db55c0 032fe02e54a010d21fd71e97596f4101 499ebef3ab31a2f98fc8a358bd085b0f c6b57e042ceadb60d6fab217d3523e17 14334c8f93f049659212773ecee477a2 e0ca85c0d264b84d977df0c48fd383cc a3754fba24f85d1d1bb7c0382e41586b 7d664485c53b98180e6f3c69e9dfa81e d4088f8202e0eb27f90e692f988f0780 9ae433cd5397af6b485f1abb06b2c5a2 58fbf6f9405327d8d158a1eeac19b81a b4d48f3e1ae339f2fcb94b7abceecfff 4b3dac0a4f452b07d29f26b119180bd2 c3f48e69bb90be828ba2835b76fb2080 a9c50b7761519fb684cdee2d59f99f91 101bdbbd99cfd74aa5724842404642f2 8e1e7f5ad99e48b740fd00085eab1f84 856cec68ddd28367c0d0f0a6f566187a d5cd1dedf3bf5c943e348a8b84e37b2a b6f005236a37367a147f9060c708ccca dde72a54716deb88c1ffef2a63faab6b 41c6861313e731bd3f84dd70360573ce 4eda75dfd4d12eda6a6219423b5972bd fa93c93a02fe2dee8a3b3d1cd82f293f 397d45b6001919b04739e26379c84dd9 28ad8e3a225400a1d00f6023f8e6c9c8 5f73beb23c45006ad952a71fa62c6f9f 21926646a658bdf39cf28cdfbb1aced7 c4aabdcf19898d9c30c4c2edea0147f0 63e2eb258a85ed4e72f951cdbff2a58e 562a64f1c09306d385962cf8084b6827 bbd99ef280efebe9066c0aef91bf02cd 37d323ffc33a0e1c6cd20234589a965d 6adec78e874232722c3758bbbcb95829 fa1c548a5d691ac9ce7bfd929f204261 5d9525b48870dc438130bd96fb8c5b66 762eef684e01831aa2f96031eff378bf 4b7a742d5c98fc62f0f67445032e7bc6 d1f55491472ca747561509106b71eab8 d38fb2d95812ffa1014e52ef3079e5da ee5a600ef9fd1defe07ea097095d1beb ccd2372bb6b07f1b5a125e597005688d 6a860285a6f7521995151a2a0cb6e316 467062d2a5a341716c42c6d7f36ba0ed 039d9e47e4474bee24785f8ec5307695 e184219366afb2e6bd0b9502beab1156 4dc99280459292ef60d6d01ed8ece312 a8e312d0c230e226e97e7a441fadbd85 9eb71edd5ec99294a1c341efa780b1b1 caec3babdec3cf267cc846fd084c4626 22ad7c05128ca7b48b0a2a4507803b16 c14eb54769ff208a2562e4ef47958d9e 3b12f36a01326ec649e4def08b860339 f80a80d25b3393825baa1e84e76ddf6c 22e7d4f7401ef34b3b6d17c15291c497 8608b31a446f42a7f36807bd6c16d2c0 e494356fc0db7ef6009d29e5ae869717 29a3666cee0762fcd731fa663ebc0011 189c72bfd8ae31abcff5e7da691a7d30 01d666fcbc4cdcedbfe7963f498e7858 f2ac2ec8173db4963dc2089ac90b8807 2828ea78cdda8f21187572c99ded6dc2 9b1af2d9c0c0687c70466385800b6847 5a88e3825c5e89b07fa9050b6b6eca7c 72d973ebfbc00d26170bfafdfbbd0179 42a2a2352f6b1f5818f3b695f240fc3a 325844f1b956c52fc220932bc717f224 92dfd0534b080234f9536371be63e37a 7e703dddcfc83cd352a910b48eaca95e 5dd2e677fd1d65f051b7f54e7402721f

AMissed0day_-RevealanotherCyberArsenalofAPT-C-06-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
AMissed0day_-RevealanotherCyberArsenalofAPT-C-06-360CoreSecurity.pdf (Click name to open as page)	360.cn blogs.360.cn www.zerodayinitiative.com	N/A	N/A

Area-1-Security-OperationDoos-IRN2TargetsSaudiArabianOilandGasIndustryWithCareer-ThemedPhishingAttack.pdf

Report name	Domains	Hosts	Samples
Area-1-Security-OperationDoos-IRN2TargetsSaudiArabianOilandGasIndustryWithCareer-ThemedPhishingAttack.pdf (Click name to open as page)	shoter.com doosan.com forskys.com barsupport.org jobs.net shoterup.com mic-careers.com dpsiesr.doosan.com www.doosan-hr.com www.utilities-me.com 30.shoter.com doosan-hr.com coldflys.com middleeast-jobs.net	35.35.35.35 173.254.236.148	88ee2c27e1dd4ed3400adf7e560d4c4ffeae17bb 991241310d775edff106be83719c07ab b409538c99f99b94a5035d9fa44a506b41be0feb23e89b7e4d272ba791aa6002 848e6582976d56f0c4b32f89f750a74c c2731f4c6927025b2747ff3ab0d8bd3d9788d8dd1a08deb8d148c30877b203d2 3db49888dd5336befee765d43f23d9f8 0bd6e06470e384571058774d9b43841c8ffe54c2 e37bafef0d3315a015f48a2bf845d855 eb1f47c9f71d3fd2ff744a9454c256bf3248921fbcbadf0a80d5e73a0c6a82de cbbd0b863c8a31e577b9eabd4d2311a3a919370b0cc848cf297151321b3f6e66 1579208bc40a873e82603844990f6a5e 7595a6534866ab0fdc0d088a0841f04d689d6eba41761ad20976a40cfa4fbdd0 1a30d55623ae68703793993c94e2af620f3655b206023ecdade099aed6a16452 c10fc157d1c291c66284a9f07b52a376 8f3953da84ec9d34ae6b97ff0f574758d39edad9 02171e646f919ef3a145323928f73f0b7104a873a4842c23abb8628d740eebec 214cd857955ed59f404f5b9fb76751eb4c2b45f4c2b9b821903d8f6c5269d810 0b88bdd5e6beec6c06ec8ad670ddff980acc4e35fa6a434268d6a0203a9dfc7a 6a3923c6c35ed2ee302de57100b15f9a7aa20f9a 20c240bde16c6dc2f1638bcdf944975c c7806e21fd9ea72d8de4b01f9dbd65a74f070b57 c71123d2f76874def40041a535839dd2db31d645 80a1a1bcf4868d08a0e65475ced6b8fd337fdf86

GlanceLove_SpyingUndertheCoveroftheWorldCup-CheckPointResearch.pdf

Report name	Domains	Hosts	Samples
GlanceLove_SpyingUndertheCoveroftheWorldCup-CheckPointResearch.pdf (Click name to open as page)	com.android checkpoint.com research.checkpoint.com anew.football.cup.world.com	N/A	2ce54d93510126fca83031f9521e40cd8460ae564d3d927e17bd63fb4cb20edc bcdeb31c0685667da5bf2b61bb0c7c7a00d76a8217d093713827dc5951cc98cb 53482979ff5c40b93a6123c043a7deff01d085b08129f1931cfbbc541ba1ddf2 67b1a1e7b505ac510322b9d4f4fc1e8a569d6d644582b588faccfeeaa4922cb7 1664cb343ee830fa94725fed143b119f7e2351307ed0ce04724b23469b9002f2 166f3a863bb2b66bda9c76dccf9529d5237f6394721f46635b053870eb2fcc5a d9601735d674a9e55546fde0bffde235bc5f2546504b31799d874e8c31d5b6e9 b9f64ffce38e224e15ec6f81b389a315b35aafe0da173205ff5e6bed4b5ee874 7c2c5909d86323c53830552b5e2fd130d2ed68fa22443e1bad22896e08f0a652 b45defca452a640b303288131eb64c485f442aae0682a3c56489d24d59439b47

MosquitocampaignbyTurlaundergoessignificantTTPsshift.pdf

Report name	Domains	Hosts	Samples
MosquitocampaignbyTurlaundergoessignificantTTPsshift.pdf (Click name to open as page)	www.welivesecurity.com security.com radare.today blog.ezua.com www.melani.admin.ch	70.32.39.219	994c8920180d0395c4b4eb6e7737961be6108f64 33d3b0ec31bfc16dcb1b1ff82550aa17fa4c07c5 114c1585f1ca2878a187f1ce7079154cc60db7f5

OopsIE!OilRigusesThreeDollarstoDeliverNewTrojan.pdf

Report name	Domains	Hosts	Samples
OopsIE!OilRigusesThreeDollarstoDeliverNewTrojan.pdf (Click name to open as page)	msoffice-cdn.com office365-technical.info pan-unit42.github.io www.reddit.com management.com msoffice365cdn.com mail.ru www.msoffice365cdn.com office365-management.com technical.info	80.82.79.221 80.82.79.240 185.162.235.29	81eb43ad46ed39bd4b869c709e5e468a6fc714485da288aaa77c80291ce6db8c ec3f55cac3e8257d6d48e5d543db758fed7d267f14f63a6a5d98ba7a0fab6870 9a040cdd7c9fcde337b2c3daa2a7208e225735747dd1366e6c0fcbc56815a07f 231115a614c99e8ddade4cf4c88472bd3801c5c289595fc068e51b77c2c8563f

JPCERT_CCBlog_MalwareTSCookie_JP-CERT.pdf

Report name	Domains	Hosts	Samples
JPCERT_CCBlog_MalwareTSCookie_JP-CERT.pdf (Click name to open as page)	gethappy.effers.com savecars.dnset.com lang.suroot.com eoffice.etowns.org langlang.dnset.com carcolors.effers.com fatgirls.fatdiary.org epayplus.flnet.org appinfo.fairuse.org okinawas.ssl443.org iawntsilk.dnset.com apk36501.flnet.org ktyguxs.dnset.com office.dns04.com edu.microsoftmse.com longdays.csproject.org inewdays.csproject.org sslmaker.ssl443.org ntp.ukrootns1.com twnicsi.ignorelist.com jpcerts.jpcertinfo.com splashed.effers.com newtowns.flnet.org twcertcc.jumpingcrab.com lookatinfo.dnset.com hatena.ne.jp jpcert.or.jp jpcert.ignorelist.com	60.244.52.29 220.130.216.76	e451a1e05c0cc363a185a98819cd2af421ac87154702bf72007ecc0134c7f417 1fa7cbe57eedea0ebc8eb37b91e7536c07be7da7775a6c01e5b14489387b9ca8 6b66c6d8859dfe06c0415be4df2bd836561d5a6eabce98ddd2ee54e89e37fd44 39d7d764405b9c613dff6da4909d9bc46620beee7a7913c4666acf9e76a171e4 06a9c71342eeb14b7e8871f77524e8acc7b86670411b854fa7f6f57c918ffd2b 12b0f1337bda78f8a7963d2744668854d81e1f1b64790b74d486281bc54e6647 afe780ba2af6c86babf2d0270156da61f556c493259d4ca54c67665c17b02023 17f1996ad7e602bd2a7e9524d7d70ee8588dac51469b08017df9aaaca09d8dd9 6d2f5675630d0dae65a796ac624fb90f42f35fbe5dec2ec8f4adce5ebfaabf75 203c924cd274d052e8e95246d31bd168f3d8a0700a774c98eff882c8b8399a2f f16befd79b7f8ffdaf934ef337a91a5f1dc6da54c4b2bee5fe7a0eb38e8af39e 201bf3cd2a723d6c728d18a9e41ff038549eac8406f453c5197a1a7b45998673 2bd13d63797864a70b775bd1994016f5052dc8fd1fd83ce1c13234b5d304330d 96306202b0c4495cf93e805e9185ea6f2626650d6132a98a8f097f8c6a424a33 0debbcc297cb8f9b81c8c217e748122243562357297b63749c3847af3b7fd646 1da9b4a84041b8c72dad9626db822486ce47b9a3ab6b36c41b0637cd1f6444d6 5443ee54a532846da3182630e2bb031f54825025700bcd5f0e34802e7345c7b2 35f966187098ac42684361b2a93b0cee5e2762a0d1e13b8d366a18bccf4f5a91 0683437aebd980c395a83e837a6056df1a21e137e875f234d1ed9f9a91dfdc7f 20f7f367f9cb8beca7ce1ba980fafa870863245f27fea48b971859a8cb47eb09 cdf0e4c415eb55bccb43a650e330348b63bc3cbb53f71a215c44ede939b4b830 4a8237f9ecdad3b51ffd00d769e23f61f1e791f998d1959ad9b61d53ea306c09

Chafer_LatestAttacksRevealHeightenedAmbitions_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
Chafer_LatestAttacksRevealHeightenedAmbitions_SymantecBlogs.pdf (Click name to open as page)	symc.ly s224.win7-update.com s5060.win7-update.com wsus65432.win7-update.com win7-updates.com s21.win7-update.com	134.119.217.84 91.218.114.225 94.100.21.213 89.38.97.112 185.22.172.40 148.251.197.113 83.142.230.113 89.38.97.115	N/A

OilRigTargetsTechnologyServiceProviderandGovernmentAgencywithQUADAGENT-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
OilRigTargetsTechnologyServiceProviderandGovernmentAgencywithQUADAGENT-PaloAltoNetworksBlog.pdf (Click name to open as page)	acrobatverify.com jobs.jobvite.com rdppath.com www.reddit.com er.com www.rdppath.com cdn.com cpuproc.com	185.162.235.121	119c64a8b35bd626b3ea5f630d533b2e0e7852a4c59694125ff08f9965b5f9cc 1f6369b42a76d02f32558912b57ede4f5ff0a90b18d3b96a4fe24120fa2c300c d7130e42663e95d23c547d57e55099c239fa249ce3f6537b7f2a8033f3aa73de 5f001f3387ddfc0314446d0c950da2cec4c786e2374d42beb3acce6883bb4e63 d948d5b3702e140ef5b9247d26797b6dcdfe4fdb6f367bb217bc6b5fc79df520

ASongofIntelandFancy_ExploitingFancyBear’suseofSSLcertificate.pdf

Report name	Domains	Hosts	Samples
ASongofIntelandFancy_ExploitingFancyBear’suseofSSLcertificate.pdf (Click name to open as page)	fastphotobucket.com 1-you.njalla.no mdcrewonline.com ns1.nemohosts.com dowssys.com nanetsdeb.com akamaisoftupdate.com www.censys.io sapo.pt joshel.com myinvestgroup.co ns1.bulletdns.net vermasterss.com dns.com space-delivery.com mvsband.com cdnverify.net ns1.ipstates.net openmailbox.org lowprt.org dvsservice.net microsoftdccenter.com funnymems.com rndversion.net acrobatportable.com travelbern.com europehistoricalmuseum.com wmdmediacodecs.com 1a7ea920.bitcoin-dns.hosting adobeupdatetechnology.com applecloudupdate.com remsupport.org engineer.com www.farsightsecurity.com nomartung.org remail.cc microsoftstoreservice.com ns1.njal.la appservicegroup.com globaltechresearch.org centrum.cz acrobatportable.co webversionact.org cock.li akamaitechupdate.com reportscanprotecting.org satellitedeluxpanorama.com lgemon.org europe.com www.proofpoint.com apptaskserver.com wsusconnect.com mail.com dvsservice.com ppcodecs.com supservermgr.com leuploader.org noticermk.com post.com spelns.com mvtband.net ns1.ititch.com dateosx.com declan.je evbrax.org ecitcom.net ns1.carbon2u.com gmx.net webviewres.net myinvestgroup.com dowstem.com runvercheck.com gtranm.com viters.org	95.215.47.162 95.215.44.247 151.80.74.170 62.113.232.197 179.43.160.184 176.223.111.237 185.61.149.24 89.45.67.20 89.45.67.26 176.223.111.10 149.255.35.6 87.236.215.5 146.185.253.131 89.33.246.117 95.215.44.240 89.42.212.141 185.86.148.212 149.255.35.7 146.185.253.132 87.121.52.162 87.236.215.21 89.34.111.160 95.215.47.226 87.120.37.25 195.12.50.163 151.80.74.167 51.254.76.54 191.96.249.31 176.223.165.217 80.83.115.187 185.156.173.70 185.86.148.14 23.227.196.21 185.86.148.57 179.43.128.75 146.0.43.98 87.236.215.134 51.254.158.57 95.215.45.43 185.216.35.26	fcc696070de34157a02c46aa765c3c7969677fea 126e9d0cf80badf7810859fc116267d40ed1c58b 9baf76a0a3a4ce78d3c2ce04e64cae0ea604c7aa b86f517d347e53b3b7116682d7f36a3b77fa8bdf 9aa7508f1be201120511b1a4bc91e653c82df924 9d54194ba9140c148b8b3eb900dfb7b11ec155e2 f6ac5bd6aa52d96d8d413157fbfd1a6be7f65cb7 b64268d418592d481e13ed6aa4dc233b9dbd486d 0153d822178cd0f0725a9a1438d5b2a49edfe71a f65d9f8f385cf384cee24a6d04df600d575dd5f6 1e185ee8ac3c3eafcc2b4d842ed5711b9c62a305 d1a1d61806513cde9b2f8d817a55cc16384f490f 9d73605a130c377909fe463bc68ac83f73c04a46 010e271b2c860caba78475f02edcd30d7a896383 46330eac674b27a4f34ba6864a74bfef59998e5c 7d5eaecc2c6865a1f846d03b6d3e0b649a36c2c1 f9abac0f831e9ea43727a02810ebd6969e8e5951 edb4339cdfa0b43d8ef5fb49cc9fdcbbbf2208be 9153efa5001c67fdce4bb861f8758cd90b072901 b07d766664cfa183dba3ee32ab35ed32c7f501c2 bd4255444ba646796c16e967ec0aa1dd95a7a0f2 46ce0b05f302e0d855e9cc751100299345466581 551a8e0b504fa19e643dae39002bd0b91a5cfa7e 2e53a96a63c8cc17f2824bcdf7c93d64dad45170 8dc11f57d69a5583b196c28a9cf816e10a3fa327 c5ec8bb4bb5842930da935e13b9bee604e3b6182 c201e616fe90ae2592c34de03611748510aba143 ea8e4e7882a116ed43db4e5218efb2fd3ba2d116 d514a2a79a0e1a046846963797319fe8e00cdbeb 2a71f7ed0de7b89f4a10d329227898edcd3af6ce 739e8cc0519aeeb8dd1417e45f9577bd394684f0 6860d7aabef2f2382476d9a350c225956bf351c7 b99346a7f7809578330e4763329209c2381d2f95 62e1045ae816b5f44cb43ab52ecb8e4534b63147 ea3198f2ef8685a6f8a1303a55fdb7062a6f30b0 1f2a652a68f9ae6a241aed55d80597222d6c2b21 513587ce94be7d70b1f6661f22758ec6fd591d11

InceptionAttackersTargetEuropewithYear-oldOfficeVulnerability-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
InceptionAttackersTargetEuropewithYear-oldOfficeVulnerability-PaloAltoNetworksBlog.pdf (Click name to open as page)	blog.ropchain.com jobs.jobvite.com www.reddit.com er.com ng.wordpress.com nvd.nist.gov www.epc.eu	51.255.139.194 188.165.62.40	2bcb8a4ddc2150b25a44c292db870124c65687444f96e078f575da69bbf018e0 8aef4975d9c51821c4fa8ee1cbfe9c1f4a88c8784427d467ea99b2c1dabe15ae cc64a68ba52283f6cf5521cf75567b3c5b5143f324d37c59906ee63f1bbafcaf 72eb022f395cc15bbe9582ee02f977ea0692932461a8b0bd608d9f0971125999 49dbcf1fc8d3381e495089f396727a959885c1dd2ab6cd202cf3c4dbd1d27c4f 687ee860fd5cd9902b441c26d72788d5a52052d03047a9b071808fc4c53a7e8b 13de9678279b6ce6d81aeb32c0dd9f7458ad1f92aee17f3e052be9f06d473bed 8b212ee2d65c4da033c39aebaf59cc51ade45f32f4d91d1daa0bd367889f934d

NewKONNIMalwareattackingEurasiaandSoutheastAsia-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewKONNIMalwareattackingEurasiaandSoutheastAsia-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.rohitab.com les.000webhost.com www.reddit.com net.com er.com blog.talosintelligence.com jobs.jobvite.com co.kr	210.112.239.74 141.223.125.112 145.14.145.32	9b1a21d352ededd057ee3a965907126dd11d13474028a429d91e2349b1f00e10 0657f788e89a437a1e6fe2630c19436736aa55dcf255540698864a7576192611 4e84f97bb61c2d373a574676fa374131460839ecc7b53064f558ce7ce55528ad 02ee6302436250e1cee1e75cf452a127b397be8d d5fc0ef2d1ed037b5b6389882f9bb4ea15a6b41f21cdc0f5e90752f4e687445c 0d98ca35b29d2a9f7ca6908747c457ebdba999f0e83e182f770848e2335ade5b 2922b7b969d96d206abc572a5cb83e69ab32ca18 ae27e617f4197cd30cc09fe784453cd4 c07bea0928a35b9292eebab32563378d01d95434d098e5c7c076e94866a14212 dce53e59b0c48e269dadc766a78667a14f11b72c49f57d95abde62c84ac8d7ae 2b6b6f24f58072a02f03fa04deaccce04b6bb43b d211815177ce4b9fd2d3c258d2fc6282c23b8458d71f8f6f0df06a9dda89c12f d92c94423ec3d01ad584a74a38a2e817449648a4da3f12d345c611edc5c4cdbd b8120d5c9c2c889b37aa9e37514a3b4964c6e41296be216b327cdccd2e908311 dc739ca07585eab7394843bc4dba2faca8e5bfe0 74ddd56b1e33aa3752f143a77e5802a5803fd2c222f2cca77bfa5c740dfc8f5e c3172b403068aabc711b7cbe4d923ae1fa705ce11c4cc71271fde83ce751c21c 48f031f8120554a5f47259666fd0ee02 1cc8ceeef9a2ea4260fae03368a9d07d56e8331b

Shamoon3TargetsOilandGasOrganization-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
Shamoon3TargetsOilandGasOrganization-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.reddit.com www.saipem.com jobs.jobvite.com er.com	N/A	0694bdf9f08e4f4a09d13b7b5a68c0148ceb3fcc79442f4db2aa19dd23681afe 391e7b90bf3f0bfeb2c2602cc65aa6be4dd1c01374b89c4a48425f2d22fe231c c3ab58b3154e5f5101ba74fccfd27a9ab445e41262cdf47e8cc3be7416a5904f ccb1209122085bed5bded3f923835a65d3cc1071f7e4ad52bc5cf42057dd2150 bc4513e1ea20e11d00cfc6ce899836e4f18e4b5f5beee52e0ea9942adb78fc70

scarlet-mimic-full-report_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
scarlet-mimic-full-report_PaloAltoNetworks.pdf (Click name to open as page)	ftp112.lenta.cloudns.pw yourturbe.org dolat.websurprisemail.com apple.lenovositegroup.com worldwildlife.effers.com account.websurprisemail.com clean.popqueen.cloudns.org bailee.alanna.cloudns.biz mareva.catherine.cloudns.us webmail.yourturbe.org dolet.websurprisemail.com qq.ufoneconference.com desk.websurprisemail.com mm.lenovositegroup.com otcgk.border.cloudns.pw freeavg.sytes.net fish.seafood.cloudns.org www.angleegg.xxxy.info yycc.mrbonus.com aaa123.spdns.de video.googmail.org email.googmail.org alma.apple.cloudns.org dolat.diyarpakzimin.com uprnd.flnet.org apple12.crabdance.com zjhao.dtdns.net vip.yahoo.cloudns.info klark.cloudns.in press.ufoneconference.com addi.apple.cloudns.org economy.spdns.de ziba.lenovositegroup.com oic-oci.3-a.net mail.firewall-gateway.com qq.yourturbe.org kasperskysecurity.firewall-gateway.com polat.googmail.org islam.youtubesitegroup.com sys.firewall-gateway.net firewallupdate.firewall-gateway.net intersecurity.firewall-gateway.com liumingzhen.myftp.org lemondtree.freetcp.com addnow.zapto.org fsb.ru ibmcorp.slyip.com accounts.yourturbe.org admin.spdns.org kissecurity.firewall-gateway.net opero.spdns.org googmail.org muslim.islamhood.net popqueen.cloudns.org www.angleegg.ddns.us lenovositegroup.com news.firewall-gateway.com ppcc.vasilevich.cloudns.info economy.spdns.eu bee.aoto.cloudns.org book.websurprisemail.com ufoneconference.com detail43.myfirewall.org websurprisemail.com freeonline.3d-game.com eemete.freetcp.com update.googmail.org firefox.spdns.de kaspersky.firewall-gateway.net news.googmail.org sisiow.slyip.com github.ignorelist.com liumingzhen.zapto.org www.gorlan.cloudns.pro bits.githubs.net gateway.com youturbe.co.cc www.googmail.org	59.188.239.117 68.71.35.135 118.193.212.12	2e1472a65a8df43c8bc9b0aff954fbc1a093c4214f6a718a08e1321db83ca683 fa08a498da0b31e77669d51a28dff166d84983fa6af693063c08f312fdce93e3 5dade00db195087aa336ce190b5fd1c22992c49556c623b42a9f742d73241a7f 47d9ba5f7bf70c5d2b7a832e070957cc7ebdcfd0a6ee75851df16dc45971ce8a 53cecc0d0f6924eacd23c49d0d95a6381834360fbbe2356778feb8dd396d723e 7fb2c37431fd7b05414b134732ba0b29cd7dad17fc176627ee0815aac60c1ab9 3d9bd26f5bd5401efa17690357f40054a3d7b438ce8c91367dbf469f0d9bd520 00bb399c429e0f1f7de751103fe92b5f820d1686d01662a08583b7a94aaed94e 0f2db64b8283b76d49c9bb272beafab8323f941b6dc3888b42ff02f08634d016 77e4ef9e08f1095487b4fa27492b4c9b8e833f29598f99a0d10f7c85b4254761 95dba004f949e44cb447246f3d2420b01db4541d0e4fa7b00d798f38a3d251e4 508a7cab0f2a69ba66e92e86817a49ecd1b9c8ae11a995147944995fc868dfad 79aca57905cca1e56b0cedf48a4d81812639c333ee6532d90a074d64b3852d6f 523ad50b498bfb5ab688d9b1958c8058f905b634befc65e96f9f947e40893e5b 53af257a42a8f182e97dcbb8d22227c27d654bea756d7f34a80cc7982b70aa60 3209ab95ca7ee7d8c0140f95bdb61a37d69810a7a23d90d63ecc69cc8c51db90 4a3d0df9fa198a7ebe45db5239d22067e74924b1aace52029b3acc9b51af691e c981db20d588ba2d0f437b4e5459e7c6763f52a97841450c94591ca28a9a2d69 e96097826179a66cc3061be0f99f7b55cc9692a6378b5c4364699327823098ab d1dd4469c7b5c462e5ff2dcef5d22775250e9ebf395f65da624f18ea7144e173 5fae5750797ebe7e7a6a6919a7d66deffb141ec28737bd72a1f7da8edd330b60 caeace73a17e220634525d2a4117525fd60cb86a06873c86571e89d156f8d72d 41948c73b776b673f954f497e09cc469d55f27e7b6e19acb41b77f7e64c50a33 6f10c892133b5dac6c40cfe77ca32b42572bc56909481b236080dfc143ef9afd a4abbcfdbf4a6c52349a843eac0396e6d8abb05f1324223980d824629a42ef7a 092085e76512f071cab12f76ed09b348 c1e8ff8ebe3754bc7d14509ef3678edf7551d876d3fa847d07d469c09bceae91 6a1c7999b4ba92899d3364fc729d0f052680be5a71dd0f13cbabdb19b82bf858 8f4cbb78356cb672bf2566e44315eb96 cd506679fd32dab16dee6fbf1cfdfe0836e092a4f5669418a199d99c9cd33abd e8e5ecf525c5259651bfbdf1923215729ec67658225eca1b02519f5f6279eacb b4c1e9c99f861a4dd7654dcc3548ab5ddc15ee5feb9690b9f716c4849714b20d fe75dff8b86dd8989d2ca00df19d51be 33e50c44804d4838dba6627b08210029ff9106fa7fd16cd7255271e153f58b05 7a1410b2eceb99ec268b50e9371e74c1 53238f67ac7e4cc27264efbacc8712bd97a5775feaf633c63adaa0785d038e8a 9b77bbb620f50632fae17c40c7469fc93ffdbc4136a6d893a9a10a44bc435da5 a195f564aa2fb66db119e2fbec93e319a973e5cf50fbf9fc08bd81f9b7ee8af8 ec4deb761b09ddc706804ef669836cf4b199f1d74b14ad623a6f6cc2f38190b8 a569f3b02a4be99e0b4a9f1cff43115da803f0660dd4df114b624316f3f63dc6 5154511a439bb367b7dd56232eb15281cb6dc4d64ea3a06e7fbbe6b176e385d4 0aab09bf0db30a4be28d19475082fd5e7f75879bf9029fdd8dfc3a1e1f072b0c 8da2f9afd914a4318a97f4d74809c0c383f8ebf0d3d6e3d3715efbd71a66a52f 19bbee954ac1a21595e63cb86d1a596236aed353804aec5cb8adfa62e70280d3 3e184a7af74905f3d3acbec913252f72 aa8a302a53bd39b2d2a6e3d8497575e2a5f9757b248e34c8e0821ce9eee5cc32 a1b7fe2acdb7a5b0c52b7c1960cfad531a7ca85b602fc90044c57a2b2531699f 5182dc8667432d76a276dc4f864cdfcef3e481783ebaf46d3b1397080b798f4a b3c9bb22fa1bc358dc23a1a4bdaf85ad1add4d812b107b7ab887affbf689933a 0d77f5f1d4c0f02fb88ac33fa365b17d28d1521cea59329ca4b3dd0b7031a60e 5db51f2f7c31de7d165ec4892ae7dcedaa036caedeef718b57953d7935582f04 fb60d14de4dba022f11437845d465a661d0c78d3d097a38770816f06992bf0af 631fc66e57acd52284aba2608e6f31ba19e2807367e33d8704f572f6af6bd9c3 12dedcdda853da9846014186e6b4a5d6a82ba0cf61d7fa4cbe444a010f682b5d 91e36e720477146f1a0c050d3bc74bc6683a03e7631317ded3c598a10465dcc8 d6d2a77f8ed2fe9fed9ee6dcb4cc0b339ba47a575c717c35815243c752d8f60c de12cd8d11478d17342c60239837c1afcc9fee72df6ffdf9943802640d43f77a 16ab40f84fc47bab2c7874bb3164c5b4 b59e8751b9f61bd4f4b9b62de8242751 a268cc4931781d1d8094a4f8f596c2de3d662f2581c735b0810ff0ecefe3f859 1f3fbb789bcbe9186a50c4f4db269736 bbdedcfe789641e7f244700e8c028ef51094b66508f503876eb0d6aa16df6aa8 7bfbf49aa71b8235a16792ef721b7e4195df11cb75371f651595b37690d108c8 7c9421a4605decfa1b3e22addbca98d86ea757dcd8ff8e075d13228c99618637 4d539f638ed476ca08da838cdfbf710dae82b582256d60a009e9d304f6822e65 6fe33c672fd30bba9bbc89dc7d88993d8783382c9f9c510677b1bb068a5f1e51 db8338e6b883fdceaa02c10ad683547a26ae32e0d4641cc24c7bd3b45154abb0 363d9557861fab2d83d04847b967996361e670e571b335c7a535bc6278cba149 669ce0975c133d54e414dbf1de546aed742e76fe3e60568e2bd4747b7e0f8b70 7156f6416e7116e52f9c67f4e716b1dbea17387e61009c7f2825debbbb4dcb73 c30d03750458bb5f2b03d6bd399ffca6d378a3adb5a74bee3b6ba4b982dbf273 d698008e417da867d02e2f5cdcc80ff92af753dd585fada42fc611c2d7332c3a cc7db456825e266849090b6fa95a94ad8c4c717712b610b0d39077af5222f4be be0e8da7e261ec7d08eaa78e79ceb1be47c324b8e142097bf6569f9471c98a4e 435df30d139ccbe5ce4e5ca6fe072e42e96d5ea1efd5317deebce462ecccc7ab 071c34b9701dd84f9590ba899a8af3eeec228a928f2d98a80dbc780e396ee01a 83ec457cba27e470404c942eb9242eeb c7b9e6b5ab07e6da404af9894c8422d9a0c9586334ddc0a3c1ea6bf23ef97fb2 03004ccc23033a09532bea7dfa08c8dfa85814a15f5e3aedb924a028bcd6f908 a9f0bddc3d3516af8355e8ac17309528cd018347e5f56a347c14da0a83b0028a a4ffca5f1c3d9c21629fa98a1e91121d954ab9347e86ac3c9613dae61bf30393 4313d9d5fc6a090e2abc41633cb2c1fd 8c423506c0c7ebe1e61071374ecf0806463a02a2100b5daa1bd942129ff8a235 caf76e19a2681dd000c96d8389afc749e774c083aef09f023d4f42fbc49d4d3d 202975d10ba417cf441e8f9986d2496807fe39e057d3226ec3b2713f0c218cd8 f511b13341c9fb4ec9ecfcfe5a5813b964c362d7c709c402ead4e010d857bf6c 4a4dfffae6fc8be77ac9b2c67da547f0d57ffae59e0687a356f5105fdddc88a3 d1f0658bbb15ab2bccc210d7e1f21b96e14ae22de8494ca95b12e182f3d0f693 27167a9d63f5ddc68a12decb1a1e0a2a29c72fe0681dca2c4f3d169f048a9d38 9adda3d95535c6cf83a1ba08fe83f718f5c722e06d0caff8eab4a564185971c5 55b7a118203a831cc69b37b785015c54 22e7517d8996e92998eb996416f9d8ef06b3b1c220c1a5d29ccd5aaef7b10c72 9ff687a813a5cb5ff10374c86f852534c1aa3e5a221123214bf52b2ff455a5da 879edf0417c4a9759040b51bf83b2fc918a6644a7c29a52252003a63036aea5c df9872d1dc1dbb101bf83c7e7d689d2d6df09966481a365f92cd451ef55f047d 428121c421bf81a0d689014cf21ec7951b0c32add86198e06f7d636981f68755 30337e99631a174d822dd3ea00a5f6cf

APT15isaliveandstrong_AnanalysisofRoyalCliandRoyalDNS.pdf

Report name	Domains	Hosts	Samples
APT15isaliveandstrong_AnanalysisofRoyalCliandRoyalDNS.pdf (Click name to open as page)	www.nccgroup.trust linodepower.com andspurs.com wikaba.org dnsapp.info zipcodeterm.com log.autocount.org ridingduck.com cavanic9.net	N/A	6ea9cc475d41ca07fa206eb84b10cf2bbd2392366890de5ae67241afa2f4269f 750d9eecd533f89b8aa13aeab173a1cf813b021b6824bc30e60f5db6fa7b950b 6df9b712ff56009810c4000a0ad47e41b7a6183b69416251e060b5c80cd05785 bc937f6e958b339f6925023bc2af375d669084e9551fd3753e501ef26e36b39d 16b868d1bef6be39f69b4e976595e7bd46b6c0595cf6bc482229dbb9e64f1bce

ReaperGroup’sUpdatedMobileArsenal_PaloAltoNetworks.pdf

Report name	Domains	Hosts	Samples
ReaperGroup’sUpdatedMobileArsenal_PaloAltoNetworks.pdf (Click name to open as page)	blog.talosintelligence.com www.reddit.com blog.alyac.co.kr cgalim.com hakproperty.com	N/A	990d278761f87274a427b348f09475f5da4f924aa80023bf8d2320d981fb3209 0de087ffb95c88a65e83bd99631d73d0176220e8b740785de78d2d79294f2303 06222141a684de8a0b6e5dc1f7a2b14603c98dbe404ad7605dc9eb9d903c3df8 d29895aa3f515ec9e345b05882ee02033f75745b15348030803f82372e83277a 28c69801929f0472cef346880a295cdf4956023cd3d72a1b6e72238f5b033aca 86887ce368d9a3e7fdf9aa62418cd68daeea62269d17afb059ab64201047e378 d5de09cc5d395919d2d2000f79326a6997f4ec079879b11b05c4d1a1a847ed00 f33aedfe5ebc918f5489e1f8a9fe19b160f112726e7ac2687e429695723bca6a 6b1f2dfe805fa0e27139c5a4840042599262dbbf4511a118d3fba3d4ec35f2d7 679d6ad1dd6d1078300e24cf5dbd17efea1141b0a619ff08b6cc8ff94cfbb27e

MaliciousDocumentTargetsPyeongchangOlympics_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
MaliciousDocumentTargetsPyeongchangOlympics_McAfeeBlogs.pdf (Click name to open as page)	sg.stickyadstv.com mafra.go.kr.jeojang.ga rst.cz nctc.go.kr pyeongchang2018.com jeojang.ga	200.122.181.63 43.249.39.152	c388b693d10e2b84af52ab2c29eb9328e47c3c16 8ad0a56e3db1e2cd730031bdcae2dbba3f7aba9c

Leafminer_NewEspionageCampaignsTargetingMiddleEasternRegions_SymantecBlogs.pdf

Report name	Domains	Hosts	Samples
Leafminer_NewEspionageCampaignsTargetingMiddleEasternRegions_SymantecBlogs.pdf (Click name to open as page)	symc.ly magiccoder.ir e-qht.az	N/A	N/A

NOKKIAlmostTiestheKnotwithDOGCALL_ReaperGroupUsesNewMalwaretoDeployRAT-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NOKKIAlmostTiestheKnotwithDOGCALL_ReaperGroupUsesNewMalwaretoDeployRAT-PaloAltoNetworksBlog.pdf (Click name to open as page)	kmbr1.nitesbr1.org jobs.jobvite.com www.thedrive.com www.reddit.com er.com www.espn.co.uk reeye.com	N/A	66a0c294ee8f3507d723a376065798631906128ce79bd6dfd8f025eda6b75e51 0669c71740134323793429d10518576b42941f9eee0def6057ed9a4ba87a3a9a 0f1d3ed85fee2acc23a8a26e0dc12e0f a2fe5dcb08ae8b72e8bc98ddc0b918e7 d13fc918433c705b49db74c91f56ae6c0cb5cf8d 05d43d417a8f50e7b23246643fc7e03d

APT-C-23IOCs_0-symantec.pdf

Report name	Domains	Hosts	Samples
APT-C-23IOCs_0-symantec.pdf (Click name to open as page)	so-chat.org mail-presidency.com fasebock.info new.filetea.me ragnar-lothbrok.info fasebcck.com oriential.website dachfunny.club accuant-googlc.com rexkatsugeki.info victor-stewart.info alisonparker.club kik-com.com hitmesanjjoy.pro zachlieberman.club assets-acc.club leonard-kim.website pmi-pna.com max-eleanor.info caroline-nina.com android-settings.info hotmailme.website john-brown.website useraccount.website namybotter.info face-book-support.email dardash.club sendbird-chat.com camilleoconnell.website natemunson.com jorah-mormont.info karenwheeler.club alain.ps rachel-green.info sec-outluck.com engin-altan.website meet-me.chat sopotfile.website rocket-chat.com sherlock-holmes.club hotimael.com buymicrosft.com usr-accounts-validation.pw italk-chat.com shailene-tris.xyz daario-naharis.info graceygretchen.info shailene-hazel.life appchecker.us ran-togomory.com debra-morgan.com chat-often.com saratancredi.info wab-whtsap.com aslaug-sigurd.info hazel-grace.info account-googlc.com myboon.website apkapps.pro arthursaito.club kristy-milligan.website bbc-learning.com joycebyers.club donna-paulsen.info zee-player.website gmailservice.us bitgames.world accountusers.website mauricefischer.club mail-police-sec.com upload999.com claire-browne.info ezofiezo.website margaery-tyrell.info accaunts-googlc.com 1jve.com lord-varys.info police-sec.club accountforuser.website pml-sac.info esofiezo.website tyrion-lannister.info david-mclean.club win-laive.com matthew-stevens.club sapport-accounts.com whispers-talk.com richard-hines.website everyservices.space cerseilannister.info yahaoa.com lindamullins.info cassy-gray.club hoopoechat.com hctmial.com parrotchat.co mary-crawley.com sportliner.website bob-turco.website spgbotup.club help-live.club zee-player.com sybil-parks.info aryastark.info david-moris.website katie.party nissour-beton.com clarke-taylor.life winlife.host eleanor-guthrie.info account-gocgle.com mail-goog1e.com black-honey.club kate-austen.info bestbitloly.website bellamy-bob.life michael-keaton.info heyapp.website dachfunny.us websetting.me davos-seaworth.info hayleymarshal.com serv2.sandtengineers.info web-wtsapp.com cecilia-dobrev.com whatsaapp.us jon-snow.pro accounts-googlc.com shortupload.com olivia-hartman.info police-sec.info lyanna-stark.info harvey-ross.info clarke-griffin.info leslie-barnes.website miranda-barlow.website help-sec.club mail-accout.club freya.miranda-barlow.website ososezo.club lexi-branson.website mygift.website ross-gelller.info yohoa-users.com mediauploader.info sec-acoaunt.com sanblitch.club katesacker.club wa-loading.com dardash.info web-wnatzapp.com cecilia-gilbert.com activedardash.club jack-wagner.website max-mayfield.com geny-wise.com fasebookvideo.com whatzopp.com accountforusers.website sanjynono.website mail-mofa-pna.com billy-bones.info lincoln-blake.website top4up.website rose-sturat.info namyyeatop.club hcttmail.com octavia-blake.world whowatchyou.com pmo-gov.info marklavi.com kaniel-outis.info wab-watzapp.com hareyupnow.club miwakosato.club exvsnomy.club accounts-gocgle.com maxlight.us secureaccountes.com pure-talk.com masuka.club young-spencer.com sahemnews.dynamicdns.co.uk login-yohoo.com davina-claire.xyz liz-keen.website james-charles.club wes-gibbins.com selin-yilmaz.info moneymotion.club redirect-wa.com maria-bouchard.website sophie-deverau.xyz lagertha-lothbrok.info youngmija.club italk-chat.info appuree.info shahrukh-khan.club mail-pmi-pna.com sahem.pcanywhere.net	N/A	cc40a67b3844116c594fd192055d62498f9907d46cc84afd6bfaefa3b6b665a9 1f015490141eca78f98a0dc32089ed7430819e763e909007ab97dc76fcf9803a cf2d7545b1f5ec57142727f795e07e85b84cbfe9a8b9f75aa5219495c746d853 93a21428286602cfe02380a33411cb9d25004f627c685b4363e9ffb3baa5f201 56007b32b896991527fbc3fa806418ecd954518758ed04e4b03a4079b754061b b6326e17ec8307edf63e731c635fbfa8469d9264cb414592e2d2a5c71093d809 6befd9dac5286f72516bba531371dc7769d9efecf56c8a44ce0c8de164662c6b 7e4a5c61a6d7718381884ac7675f335282169641518379ea921731cf08c95b49 ed6c375e86fb5670bb23fe060399bf2232099197a3e226f318d54cdf9b1b946a d756387e7becead2ff2d035d94282741f5d6c04129cb0a1dceefd71eefabcb35 6307bee86c07f0d24a4708a2265aebf44126389da4649e83d38d3d76a4a18a57 e0e1addc23a032b538a344498e862b808e767ce8bed9412dd8990d00b1d64b34 46f5df76f723e67a42ef49cce8d84a0f9af869b170f730df01d29138b36d3f24 76962d334b894349a512d8e533c8373b71389f1d20fd814cd8e7ecc89ed8530a 9db025bb854b4d9cd9d9bb29a626501e89c6f4704953b852f3b7c4fae5389f13 d16b235d931d4eecb38365af538be023bebdb547f8aadf69de4aadfabc65620a 5de5b948aeca6e0811f9625dec48601133913c24e419ce99f75596cb04503141 6665a99e53b2d28497e4edba4c67b8e587b9291d524c737235c69379a00190ae 541583f20ec349ea3ce921c2a54194559bbd90bbd0b954f1f8562ae88bbffc6e 3b22e84e7edb9b7277672a1341f8a347094797beb8e8ee80e09fdb9a9230fc76 79af9a040c633914b911be45ef4301979e2c54bd65f47391432bf9cdecb797a9 9a8bb68564c8cd38e47a91c816776a84d78dfe5bd35cd014400e87cb76ca9440 fe074e77cf64227b6f79d08cae573dd8d48e32e72abf8482a1a4d7a6e42b4f2d 1995f315d0431141b25dd2962a2b517bc27d0ba694fddf982d970f512f784945 7daa98b750217a72e6e1e33878e9ec737c871563d3bd98e20610926607d9a05d 66bd32489206fdbb8b5d15f589e999db1b8e67c9102244735ac154123f2e9495 6ab11df57111af5c4965d3d39a3e8fe710c3eb7a1ba013e74551c14f42c5bb67 461e9c8fb2b0a049df3b5fccd9c453c65d30ee02699f715da09796a5bb236f7c dd43001cfdbfe1cdade2f8a969580b4e134dbb66d0517518afc773f22e9f97e0 14c846939641eb575f78fc8f1ecb2dc76979a5e08366e1809be24fad240f6ad6 cbf9a0737e27fafafaff5c73825bb96907a976b230bf18843badd7b10d475eb2 e14f99608a8d16cdd17786d218e173b44bbf9d5e30387d949a72604ec29cc4c6 f11cdfdad004425780dfed26a604f9b1f0738598180f34204073e6dcb16fc4d0 815f3fd9353ad54dbec0cc1f3cf86477f2f812f995385ac701759959c444a7f1 14b739028e1e85a95cd2efc4019fdae9a49622afe07d8ef542634b1908baedee c38d2a739d9a4e7df51176c95abc43ba606928c5d88b3ebcd7202dbaa0499e35 d209352b6814660ccfc95c5ff7f780d395cdca18d793db8bd3004fd8ba9b6922 e59dfdb9da28e2d8016e40f09f1744b45379eebe02d3244a9dd7327b787923b8 4b5dafd98fdffe2736787281db233f8f1e904b05e70acbfa2358cb901269d039 2240c56c98c90acc0cbc58ba0ea6f7d78bb2f80d97f5c23e2a6e0ba5e2db4960 1a9d5717622111e73cd11617bf29b9e8e9c50a83b90c85dee909faad24684585 b09f657063d254e4ce73d35a9da1aee9e1662ad8d8458a19f08cc32de53035e1 8a7f8ab2bd774ce6861d1e86f52ad8ae2df2a2ac84e86a1f2e362b73c7f077f7 27d89d88db6fe1365e2c1ded2e8af805c353d741bfd45023e9f67e2cc8c4d28e 0fe9facdb01a4836036eaccaafd386721095b18c890d676e8d387647153fa927 964be0420d65b6581d970a7b330f8c0b85fe735d1f7fbfc21dafbc3bf8b4db39 566385bff532d1eb26b49363b8d91ed6881f860ffa4b5ddb2bb5fe068bb6c87e 56f13b40f115af5114445d6ea04e5c00b19302ec4425e1995e423f0cd4cc3cf0 65495e63799a0e919937d83dee6f059a1cd2affe5411ba7d6fc454e36c0571e8 99dbcf0200ec3d046c92f32e4494590c18667f163f97cc9f5a2fb8f4a5c83da5 91b3eeb8ba6853cab5f2669267cf9bccdba389149cc8b2c32656af62bd016b04 e431aa55ad197aa027ab51c22c2afa01454fb7cb9a4e4d4cec8f5a9c2ad735e8 9cff78daf29290514b088272db4f0502c5f969905c6bebfdf5a022ddbb69b248 96ab58d8ffb99f4b3b87afb48ceed3be01e9f8de333be0b91efd39fc7a99eeb3 ec1ed9b064ffbd237e1808d4e156d011b8b77402042b7a6fee92923b69ba65d4 7752f5662d904a261eb57a948278d0804efef827c1bec6337e6b210a00635a27 28f268634533858725500b1e05d85174d29f58f51d9b2af3f75daabdc9a4f32b dfbd6e916ab1660f4fd87552fd392e43122e797ca8d66aa3123623cd70b78d0c 80c699542658187826266a4aab84edc1fef5fde53281168806efb3e0e77e82b1 90236bcdd71611256642ea4e76cf8fdccb2af8fd37da1a4bc7f0844d0fc6be7d 8d5f5be15c93f57a6349dd9ce1637c5a8913523745f502f37cd1a0691db30693 66d1d6f099a1aadd8d747a4b3cefeb72d835eaa55ec5392ff55fd6e892d90344 b7007d2039abaf8b8b0db77241d400a8c4d3b48c6fece5d80dc69905d4d272c3 4e681d242bebf64bbba3f0da91ad109dd14f26e97cd62f306e9fca1603a0009e a841b71431e19df7e925d10a6e43a965fc68ccbb6523b447de82c516cfba93a8 1b3fddc07f524b22559a6c6688ff90fd0e7f035a5ac36237be5e28a10887e928 f047aefc87d9d5bdcb507db857b5e16cb7e7177452480ac18d8e34069f289174 ddfe29e690f8ecd08c6efd304ac89283967b63e9e0ea508d8b69ab4a5365f038 7dea246c7f97f0526f622e03ee6a56cf11681338d30b2a0a4d30c00821ccfa72 1702b7038a1a1dc514054d3070939b4c1fabf3b51a0192d64dcd4f934c27b3ca 2ff47bb5ce6baacba85047c43afe1f3a7f034f1dd547c385394055afa4ba64bc 313ae27ec66e533f7224d99c1a0c254272818d031456359d3dc85f02f21fd992 d17308fb06760de1b06d03448a01f3762f2712c1a66b50c8d5f4ac061d6deb27 e2cb9140c47492e7931e0b6629caf5c03cbc4e7a28c7976a28e3158b5d1c67fb 46c5bec32c558b9c4aa0775759568a730211baf8807e797b4bd21707dd40dee4 76e0e770d2abbf7ea63b0221ef0b0f799f54792004f15a2a9e1e7844cf8b1965 1c0e3895f264ac51e185045aa2bf38102da5b340eb3c3c3f6aacb7476c294d62 79947899241dde6bb6c3b82d8a0841928fa25333909907ddafeddcc987d37fb9 371f13e4dacb0a740752a2352f09804bae99887b833c6989feb211702b3679cb 93da08ced346b9958e34bda4fe41062572253472c762a3a837e0dd368fffec8b 51e2630f942578d81ed000aa8a7b5ff7e19608a53323092ba72bc3b686614e25 c417cacb2fc6160e3754e552f6ac9006350a1fa016c987a885d3e4e1c33c84b6 46976081c1bcec4daa9701fbe373010c0bcb17463359a91556f09339522b6a13 1aa881100698621fab59ebe8caf0a7b422bee42137c3dcf0edd5e6608286e1da 885fcf646972f40a775388f29a51fbb9232a9e000a2cc53eeb3125ba6e696020 9d567bf55bce66ae9419f90c59570f51df54cb5fc1d6d360e3e13c42aa74c2bb 28a9a97927e76c5c9228ef465f78feea51f0d47e6e0c1440f38f2bc1230ae437 455c5bbcc9b90a2799d4a5477950bbcc102757a4216cbcbb749a6fe74de4bb15 823f66c8d27294e54d0fdc91629bd8487af9b9ee034d06cc8dacc6ca5ac32926 7d7d554e84deae2c46bc2a9bf747207303deb50dc5996b018336035ac7a80059 be809f5442aa5a60cbb07556ea25e7730078f1d44d5b0e7bb31b14193cfe9ba2 91cbeb6b02575423621e0a0871efca3b6d25004ce9c1700b97748e2d330b60fb 4842cff6fc7a7a413ceed132f735eee3121ffb03f98453dae966f900e341dd52 bdea751c2e106a4f83d8ba32b1f193a3aa65bf3aba4405e025887bb66cb7a0c3 8d184f24277ace3dd55811c3ed5b810eaa34a1c9bff0de2a15eb996134e9e241 9d629d20fdb0d4650a3c1a308028c7c51d673770a988d78cccb4bb819ffc08a8 5c4733a5dabeda2dcd8602b12a86460bca6ed33ac1197045536ed8e7afbe9244 0537cdd971843545ce569415226dfabd1053a149a2586f163b58f7cb46e80ac5 5dd46064501235c0d02ae9155d6d5f0b526703a8244da5d8299f590b427a3c2e 183ec1960e40b0831fbc47bbd87de530a1f92de02b1a60eb91771ef5d7dd016b ac8ecb7190b7c3c7a2f45ddc26040dae5e048b8c6c657c78007412e7ee56d50e dac29a5e7f19b51c9cff249b8e930d15913a92907f96bcc20f7de8ef3d0185f3 bea4915454933db54ddc1d41c9e5d06dc7c4abdf5ae4a768239b32733498e10f 8da31d3102524d6a2906d1ffa1118edf39cf54d72456937bfbae5546e09a3c32 58ddd057ec7f2420ce94cf3fc52794d0f62603ca7eaf8c5911f55b8b100ac493 4ebb385b0bf460d8561c39af8b69144bfe8c7a4d8607b157784674de653b9a05 377716c6a2b73c94d3307e9f2ea1a5b3774fa42df452c0867e7384eb45422e4f ca8d892a616feaf240bd9e05a250db8ed4d56b7db6348bbaa415dec1e0c626f3 961ec09537004445b85ab79c0ff69fea08d619da97344a792b689223ca1d5b43 59689c7112d94170e669fd692dfa807a064ecce2f1e505ddda7cd6874dbc351c 86e453b251707eb2b73a3f547d7ed34af2b850fd9d319143c22778dd73066901 e7d7f110369a67dd1129c5fbd38daeadcc01c2ab3ced98e2a3135283678e1914 adcc3186e92f9ffe6277443b918cef997f2debbd84f7ccba974ab89bedfe90a3 1f18aac7c04725c934f6cfbbcdc1e170c80ca8bd51a722a462fa2fd2ef549923 c5f576339f5389518d9cf7ed8efe2727b5685ccdd55f5f862411b17138b44c73 a9ba4e59e1d4bc3757d276c9c083e0a1c13843ff32c0cb45b29b60cb6586e022 6c53feb4b6cac4ac7c17227b076ff3248bfae37d21802646db7540d3748029bf 16327e5fbb60bc8f57ba2bbfe02c0464ce0755312a10f566cd7123cf978160d3 b806eaa463d6da64caf3e04f6344ce113a2b12c5107e37cd0ddaa382a7932a36 dd21373738175567c92de2031e9efce761ba8d1fe6c6e04e69648e7528eed309 d6a7c537a3101c38d0bafdcde685ad97ebc15ecac6bfa6eacba80b933ae8a151 3a6ce795b393cf05daa2fcb82eb7c0fee5b1b0b7cd268d6432aace0e8ca42e27 597d362a1206b0d69e3c69a0a2f1725589af239c56d5de781622d317602b1f11 6bdf6f1d5a8a4c94589ab9f1d40db7e7710bae82f143209f058b6e0b8f25884d 453437ea43a67536b5724bb0e6bf576fb510ff1d6ea5307cfa7ec8ee46c0dc8f

TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers«TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers_FireEyeInc.pdf

Report name	Domains	Hosts	Samples
TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers«TRITONAttribution_RussianGovernment-OwnedLabMostLikelyBuiltCustomIntrusionToolsforTRITONAttackers_FireEyeInc.pdf (Click name to open as page)	reeye.com	87.245.143.140	N/A

ShamoonAttackersEmployNewToolKittoWipeInfectedSystems_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ShamoonAttackersEmployNewToolKittoWipeInfectedSystems_McAfeeBlogs.pdf (Click name to open as page)	mynetwork.ddns.net possibletarget.ddns.com	N/A	2abc567b505d0678954603dcb13c438b8f44092cfe3f15713148ca459d41c63f 5203628a89e0a7d9f27757b347118250f5aa6d0685d156e375b6945c8c05eb8a d9e52663715902e9ec51a7dd2fea5241c9714976e9541c02df66d1a42a3a7d2a 35ceb84403efa728950d2cc8acb571c61d3a90decaf8b1f2979eaf13811c146b

DarkHydrusUsesPhisherytoHarvestCredentialsintheMiddleEast-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
DarkHydrusUsesPhisherytoHarvestCredentialsintheMiddleEast-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.us jobs.jobvite.com 0utl00k.net www.reddit.com cert.gov er.com	195.154.41.150	0b1d5e17443f0896c959d22fa15dadcae5ab083a35b3ff6cb48c7f967649ec82 d393349a4ad00902e3d415b622cf27987a0170a786ca3a1f991a521bff645318 9eac37a5c675cd1750cd50b01fc05085ce0092a19ba97026292a60b11b45bf49

OceanLotus_NewwateringholeattackinSoutheastAsia.pdf

Report name	Domains	Hosts	Samples
OceanLotus_NewwateringholeattackinSoutheastAsia.pdf (Click name to open as page)	arabica.podzone.net toithichdoc.blogspot.com static.tagscdn.com figbc.knowsitall.info ip.getmyip.com ichefbcci.is blogs.360.cn www.volexity.com chef.com cdnscr.thruhere.net cdn1.shacknet.us tinkhongle.com sskimresources.com fvpoc.org likescandy.com www.mfaic.gov.kh url.com gui.dnsdojo.net trc.webhop.net nguoitieudung.com.vn getbootstrap.com daichungvienvinhthanh.com www.alexa.com metacachecdn.com www.welivesecurity.com mfaic.gov.kh tiqqcdn.com wfpscripts.homeunix.com baotgm.net html5.endofinternet.net 2mdn.net mtgvinh.net conggiaovietnam.net wp.com thongtinchongphandong.com weblink.selfip.info renew.webhop.info adroll.com actor.com tiwimg.com danviet.vn widgets.wp.com danchimviet.info utagscript.com lcontacts.servebbs.net trieudaiviet.com cdnazure.co stat.com danviethouston.com raovatcalitoday.com cnrp7.org cnevids.com phnompenhpost.com tynt.co cdn.blogdns.net lienketqnhn.org ampproject.com pixel1.dnsalias.net mod.gov.kh skimresources.com gardencityclub.com tcog.thruhere.net cdn.ampproject.com	159.65.128.57 128.199.159.127 178.128.90.182 178.128.98.139 159.65.137.144 178.128.90.223 142.93.127.120 178.128.28.89 142.93.116.157 159.65.7.45 178.128.28.93	2194271c7991d60ae82436129d7f25c0a689050a a612cdb028e1571dcab18e4aa316da26 996d0ac930d2cdb16ef96edc27d9d1afc2d89ca8

NewTechniquestoUncoverandAttributeFinancialactorsCommodityBuildersandInfrastructureRevealed-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
NewTechniquestoUncoverandAttributeFinancialactorsCommodityBuildersandInfrastructureRevealed-PaloAltoNetworksBlog.pdf (Click name to open as page)	document.biz contents.bz jobs.jobvite.com total7.biz dropbox.biz judgebin.bz www.reddit.com webclient1.biz transef.biz le.biz freecloud.biz bnet1.biz s3.sovereigncars.org.uk mycontent.biz www.pedidoslalacteo.com.ar 368.com 365.com fundsxe.com les.com documents.biz zstorage.biz cloud.biz calwebmedia.com net.biz direct.biz ack.mitre.org www.europol.europa.eu rstcloud.biz centrum.cz er.com blog.talosintelligence.com yourdocument.biz www.mky.com www.proofpoint.com via24.biz mail.halcyonih.com share.biz goo.gl xstorage.biz server838.com ulaval.ca www.bit.do arubrabank.com fundswp.com one.biz blog.morphisec.com	N/A	d5328e519daadaf1520619da1f24f6d81d23c84222640058bbb366752be93537 cb5644bd670dcd9caf5185ebe396996e514ed1d93982157186611135aea79bd3 187e0d911cd0393caad1364ded1c394257cd149898b31f9718c7c6319af79818 d8a2384a51cd59f6390e6a4fcb04b51358cdbd5e04cae5be23daae548c306a73 5ac1612535b6981259cfac95efe84c5608cf51e3a49b9c1e00c5d374f90d10b2 195580b78e144f66ac1f9be2b927d7828ed1dc3974dc1897e0ed59a96ac8f4e1 94c9fa812cebb733eda3a4eed33a0a49b60c207bb0f9153c0d08724c8b30f578 12ecb6b3780cd19ea84f6e84e816a701e8231441bf90145481baa0648139e001 62a278119d732e4c839ee074553f087588a9040be027bdf9e617413c6fd2e9af a0111977c79f4eb30511f22055b54e4e973c0501240f3ba462691b1b4999d561 e657fe761effbe7e11e3cc343ba6845c2c9a6c989e7b805717d2e1417387528f 477c432382c97648767ee45c264f0f2aaf8d3d9f9ed547d8418db12b7c140760 988d430ce0e9f19634cf7955eac6eb03e3b7774b788010c2a9742b38016d1ebf a5f2ad08b5afdbd5317b51d0d2dd8f781903522844c786a11a0957a81abfd29e 57f65ecb239833e5a4b2441e3a2daf3513356d45e1d5c311baeb31f4d503703e 19dc9b93870ddc3beb7fdeea2980c95edc489040e39381d89d0dfe0a825a1570 161ba501b4ea6f7c2c8d224e55e566fef95064e1ed059d8287bc07e790f740e8 444c63bb794abe3d2b524e0cb2c8dcc174279b23b1bce949a7125df9fab25c1c 9d6fd7239e1baac696c001cabedfeb72cf0c26991831819c3124a0a726e8fe23 641d692386dab5ca60f4c6b1da0edecc5c3473c9a7d187dad6098786404780a3 020ba5a273c0992d62faa05144aed7f174af64c836bf82009ada46f1ce3b6eee 8004601c08983420408d2784e2a4aa79de426d41a09726a884edcb21f83ee7f8 e0f1dbc10088b68f772ee73b0785c3d67b8e5f147b687911613d163ad5ebda6d 8a6d2cccb6f2007cb7fa29d3f009f9fbe305bffc45dc35d3828f2dc3c41b3cb7

ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ExaminingCodeReuseRevealsUndiscoveredLinksAmongNorthKorea’sMalwareFamilies_McAfeeBlogs.pdf (Click name to open as page)	www.intezer.com mtn.co.kr www.operationblockbuster.com analyze.intezer.com blog.talosintelligence.com reeye.com baesystemsai.blogspot.com	N/A	N/A

PrinceofPersia_TheSandsofFoudre-Intezer.pdf

Report name	Domains	Hosts	Samples
PrinceofPersia_TheSandsofFoudre-Intezer.pdf (Click name to open as page)	www.intezer.com f8b65751.space ns2.cf75d89b.space 1f0e7a56.space ns1.cf75d89b.space analyze.intezer.com 1d8bfc20.space 607d6cdc.space 891ec9e9.space 8fb167c7.space 68094ac0.space fe19f97f.space dynu.net 177a5c4a.space	185.61.154.26	N/A

DearJoohn_TheSofacyGroup’sGlobalCampaign-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
DearJoohn_TheSofacyGroup’sGlobalCampaign-PaloAltoNetworksBlog.pdf (Click name to open as page)	post.cz jobs.jobvite.com www.reddit.com er.com ambcomission.co ambcomission.com www.welivesecurity.com	188.241.58.170	5173721f3054b92e6c0ff2a6a80e4741aa3639bc1906d8b615c3b014a7a1a8d7 b41480d685a961ed033b932d9c363c2a08ad60af1d2b46d4f78b5469dc5d58e3 651d5aab82e53711563ce074c047cbaa0703931673fa3ad20933d6a63c5c3b12 fc69fb278e12fc7f9c49a020eff9f84c58b71e680a9e18f78d4e6540693f557d 215f7c08c2e3ef5835c7ebc9a329b04b8d5215773b7ebfc9fd755d93451ce1ae 2da5a388b891e42df4ed62cffbc167db2021e2441e6075d651ecc1d0ffd32ec8 9a0f00469d67bdb60f542fabb42e8d3a90c214b82f021ac6719c7f30e69ff0b9 4405cfbf28e0dfafa9ea292e494f385592383d2476a9c49d12596b8d22a63c47 c20e5d56b35992fe74e92aebb09c40a9ec4f3d9b3c2a01efbe761fa7921dd97f 40318f3593bca859673827b88d65c5d2f0d80a76948be936a60bda67dff27be9 a23261e2b693750a7009569df96ec4cf61e57acc9424c98d6fe1087ff8c659ce 86bb3b00bcd4878b081e4e4f126bba321b81a17e544d54377a0f590f95209e46 abfc14f7f708f662046bfcad81a719c71a35a8dc5aa111407c2c93496e52db74 2cfc4b3686511f959f14889d26d3d9a0d06e27ee2bb54c9afb1ada6b8205c55f c91843a69dcf3fdad0dac1b2f0139d1bb072787a1cfcf7b6e34a96bc3c081d65 61a1f3b4fb4dbd2877c91e81db4b1af8395547eab199bf920e9dd11a1127221e 054c5aa73d6b6d293170785a82453446429c0efc742df75979b760682ac3026b 174effcdeec0b84c67d7dc23351418f6fa4825550d595344214cc746f1a01c1a ecc5805898e037c2ef9bc52ea6c6e59b537984f84c3d680c8436c6a38bdecdf4 e5aece694d740ebcb107921e890cccc5d7e8f42471f1c4ce108ecb5170ea1e92 79bd5f34867229176869572a027bd601bd8c0bc3f56d37443d403a6d1819a7e5 d06be83a408f4796616b1c446e3637009d7691c131d121eb165c55bdd5ba50b4 ed8f52cdfc5f4c4be95a6b2e935661e00b50324bee5fe8974599743ccfd8daba 6ad3eb8b5622145a70bec67b3d14868a1c13864864afd651fe70689c95b1399a 5749eb9d7b8afa278be24a4db66f122aeb323eaa73a9c9e52d77ac3952da5e7d 861b6bc1f9869017c48930af5848930dd037fb70fc506d8a7e43e1a0dbd1e8cb af77e845f1b0a3ae32cb5cfa53ff22cc9dae883f05200e18ad8e10d7a8106392 b9f3af84a69cd39e2e10a86207f8612dd2839873c5839af533ffbc45fc56f809 34bdb5b364358a07f598da4d26b30bac37e139a7dc2b9914debb3a16311f3ded 77ff53211bd994293400cb3f93e3d3df6754d8d477cb76f52221704adebad83a 5a02d4e5f6d6a89ad41554295114506540f0876e7288464e4a70c9ba51d24f12 0d7b945b9c912d205974f44e3742c696b5038c2120ed4775710ed6d51fbc58ef f1e2bceae81ccd54777f7862c616f22b581b47e0dda5cb02d0a722168ef194a5 cac630c11c4bf6363c067fbf7741eae0ec70238d9c5e60d41f3ed8f65b56c1d1 68df0f924ce79765573156eabffee3a7bb0fa972d2b67d12dd91dea3ec255d24 78adc8e5e4e86146317420fa3b2274c9805f6942c9973963467479cb1bbd4ead

TheFracturedBlockCampaign_CARROTBATUsedtoDeliverMalwareTargetingSoutheastAsia-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
TheFracturedBlockCampaign_CARROTBATUsedtoDeliverMalwareTargetingSoutheastAsia-PaloAltoNetworksBlog.pdf (Click name to open as page)	www.nknews.org jobs.jobvite.com les.000webhost.com 071790.000webhostapp.com byethost10.com ftp.byethost10.com webhost.com 881.000webhostapp.com bluemountain.1apps.com byethost7.com 7077.000webhostapp.com vnik.000webhostapp.com bytehost31.org koryogroup.com attach10132.1apps.com www.reddit.com filer1.1apps.com hanbosston.000webhostapp.com er.com blog.talosintelligence.com sensepost.com a7788.1apps.com ftp.byethost7.com s8877.1apps.com	61.14.210.72	26fc6fa6acc942d186a31dc62be0de5e07d6201bdff5d7b2f1a7521d1d909847 cf31dac47680ff1375ddaa3720892ed3a7a70d1872ee46e6366e6f93123f58d2 1142dcc02b9ef34dca2f28c22613a0489a653eb0aeafe1370ca4c00200d479e0 da94a331424bc1074512f12d7d98dc5d8c5028821dfcbe83f67f49743ae70652 f27d640283372eb805df794ae700c25f789d77165bb98b7174ee03a617a566d4 fe8d65287dd40ca0a1fadddc4268268b4a77cdb04a490c1a73aa15b6e4f1dd63 62886d8b9289bd92c9b899515ff0c12966b96dd3e4b69a00264da50248254bb7 337b8c2aac80a44f4e7f253a149c65312bc952661169066fe1d4c113348cc27b 9fa69bdc731015aa7bdd86cd311443e6f829fa27a9ba0adcd49fa773fb5e7fa9 42e18ef3aaadac5b40a37ec0b3686c0c2976d65c978a2b685fefe50662876ded 8b6b4a0e0945c6daf3ebc8870e3bd37e54751f95162232d85dc0a0cc8bead9aa d965627a12063172f12d5375c449c3eef505fde1ce4f5566e27ef2882002b5d0 e8381f037a8f70d8fc3ee11a7bec98d6406a289e1372c8ce21cf00e55487dafc a943e196b83c4acd9c5ce13e4c43b4f4 70106ebdbf4411c32596dae3f1ff7bf192b81b0809f8ed1435122bc2a33a2e22 ac23017efc19804de64317cbc90efd63e814b5bb168c300cfec4cfdedf376f4f fe186d04ca6afec2578386b971b5ecb189d8381be055790a9e6f78b3f23c9958 a23f95b4a602bdaef1b58e97843e2f38218554eb57397210a1aaa68508843bd0 7d443434c302431734caf1d034c054ad80493c4c703d5aaeafa4a931a496b2ae 3cbccb059225669dcfdc7542ce28666e0b1a227714eaf4b16869808bffe90b96 7d8376057a937573c099e3afe2d8e4b8ec8cb17e46583a2cab1a4ac4b8be1c97 59b023b30d8a76c5984fe62d2e751875b8b3ebe2d520891458cb66a4e9c40005 e3b45b2e5d3e37f8774ae22a21738ae345e44c07ff58f1ab7178a3a43590fddd e218b19252f242a8f10990ddb749f34430d3d7697cbfb6808542f609d2cbf828 fa712f2bebf30592dd9bba4fc3befced4c727b85a036550fc3ac70d1965f8de5 7ae933ed7fc664df4865840f39bfeaf9daeb3b88dcd921a90366635d59bc15f2 92b45e9a3f26b2eef4a86f3dae029f5821cffec78c6c64334055d75dbf2a62ef 2547b958f7725539e9bba2a1852a163100daa1927bb621b2837bb88007857a48 d34aabf20ccd93df9d43838cea41a7e243009a3ef055966cb9dea75d84b2724d a0f53abde0d15497776e975842e7df350d155b8e63d872a914581314aaa9c1dc dca9bd1c2d068fc9c84a754e4dcf703629fbe2aa33a089cb50a7e33e073f5cea 824f79a8ee7d8a23a0371fab83de44db6014f4d9bdea90b47620064e232fd3e3 3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561980dd e527ade24beacb2ef940210ba9acb21073e2b0dadcd92f1b8f6acd72b523c828 0490e7d24defc2f0a4239e76197f1cba50e7ce4e092080d2f7db13ea0f88120b 3663e7b197efe91fb7879a56c29fb8ed196815e0145436ee2fad5825c29de897 6c591dddd05a2462e252997dc9d1ba09a9d9049df564d00070c7da36e526a66a ba78f0a6ce53682942e97b5ad7ec76a2383468a8b6cd5771209812b6410f10cb 3e4015366126dcdbdcc8b5c508a6d25c 2da750b50ac396a41e99752d791d106b686be10c27c6933f0d3afe762d6d0c48 7cf37067f08b0b8f9c58a35d409fdd6481337bdc2d5f2152f8e8f304f8a472b6 fceceb104bed6c8e85fff87b1bf06fde5b4a57fe7240b562a51727a37034f659 0bb099849ed7076177aa8678de65393ef0d66e026ad5ab6805c1c47222f26358 f4c00cc0d7872fb756e2dc902f1a22d14885bf283c8e183a81b2927b363f5084 cfe436c1f0ce5eb7ac61b32cd073cc4e4b21d5016ceef77575bef2c2783c2d62 ffd1e66c2385dae0bb6dda186f004800eb6ceaed132aec2ea42b1ddcf12a5c4e 87c50166f2ac41bec7b0f3e3dba20c7264ae83b13e9a6489055912d4201cbdfc 22b16fa7af7b51880faceb33dd556242331daf7b7749cabd9d7c9735fb56aa10 5a2c53a20fd66467e87290f5845a5c7d6aa8d460426abd30d4a6adcffca06b8b aef92be267a05cbff83aec0f23d33dfe0c4cdc71f9a424f5a2e59ba62b7091de 5d1388c23c94489d2a166a429b8802d726298be7eb0c95585f2759cebad040cf 2efdd25a8a8f21c661aab2d4110cd7f89cf343ec6a8674ff20a37a1750708f27 ba100e7bac8672b9fd73f2d0b7f419378f81ffb56830f6e27079cb4a064ba39a 1c8351ff968f16ee904031f6fba8628af5ca0db01b9d775137076ead54155968

BisonalMalwareUsedinAttacksAgainstRussiaandSouthKorea-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
BisonalMalwareUsedinAttacksAgainstRussiaandSouthKorea-PaloAltoNetworksBlog.pdf (Click name to open as page)	rostec.ru homeip.com www.kcg.go.kr jennifer998.lookin.at www.reddit.com kted56erhg.dynssl.com camal.coseinc.com ng.tempors.com jobs.jobvite.com er.com www.rsaconference.com euiro8966.organiccrap.com boozallenmts.com games.my	116.193.155.38 196.44.49.154	dfa1ad6083aa06b82edfa672925bb78c16d4e8cb2510cbe18ea1cf598e7f2722 359835c4a9dbe2d95e483464659744409e877cb6f5d791daa33fd601a01376fc 43459f5117bee7b49f2cee7ce934471e01fb2aa2856f230943460e14e19183a6 b1da7e1963dc09c325ba3ea2442a54afea02929ec26477a1b120ae44368082f8 f431e0bed6b4b7ffef5e40b1b4b7078f2538f2b2db2869d831de5d7df26ee6cd 0641fe04713fbdad272a6f8e9b44631b7554dfd1e1332a8afa767d845a90b3fa 1128d10347dd602ecd3228faa389add11415bf6936e2328101311264547afa75 b2b764597d097fcb93c5b11cbd864ab1bcb894a2a1e2d2de1c469880f612431c

OperationParliamentwhoisdoingwhat_-Securelist.pdf

Report name	Domains	Hosts	Samples
OperationParliamentwhoisdoingwhat_-Securelist.pdf (Click name to open as page)	N/A	N/A	N/A

OperationOceansaltDeliversWaveAfterWave_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
OperationOceansaltDeliversWaveAfterWave_McAfeeBlogs.pdf (Click name to open as page)	N/A	N/A	N/A

OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussiaExploitingaZero-day-360CoreSecurity.pdf

Report name	Domains	Hosts	Samples
OperationPoisonNeedles-APTGroupAttackedthePolyclinicofthePresidentialAdministrationofRussiaExploitingaZero-day-360CoreSecurity.pdf (Click name to open as page)	blogs.360.cn www.p2f.ru	188.241.58.68	f951362ddcc37337a70571d6eae8f122 2abb76d71fb1b43173589f56e461011b 92b1c50c3ddf8289e85cbb7f8eead077 1cbc626abbe10a4fae6abf0f405c35e2

ShamoonReturnstoWipeSystemsinMiddleEastEurope_McAfeeBlogs.pdf

Report name	Domains	Hosts	Samples
ShamoonReturnstoWipeSystemsinMiddleEastEurope_McAfeeBlogs.pdf (Click name to open as page)	key8854321.pub	N/A	bf3e0bc893859563811e9a481fde84fe7ecd0684 10411f07640edcaa6104f078af09e2543aa0ca07 df177772518a8fcedbbc805ceed8daecc0f42fed 41f8cd9ac3fb6b1771177e5770537518 43ed9c1309d8bb14bd62b016a5c34a2adbe45943

AnalyzingOilRigsOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf

Report name	Domains	Hosts	Samples
AnalyzingOilRigsOpsTempofromTestingtoWeaponizationtoDelivery-PaloAltoNetworksBlog.pdf (Click name to open as page)	jobs.jobvite.com www.reddit.com withyourface.com paloaltonetworks.sharepoint.com er.com	N/A	a5bec7573b743932329b794042f38571dd91731ae50757317bdaf9e820ec8d5e 66d678b097a2245f60f3d95bb608f3958aa0f5f19ca7e5853f38ea79885b9633 7cbad6b3f505a199d6766a86b41ed23786bbb99dab9cae6c18936afdc2512f00 687027d966667780ab786635b0d4274b651f27d99717c5ba95e139e94ef114c3 6719e80361950cdb10c4a4fcccc389c2a26eaab761c202870353fe65e8f954a3 364e2884251c151a29071a5975ca0076405a8cc2bab8da3e784491632ec07f56

CiscosTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf

Report name	Domains	Hosts	Samples
CiscosTalosIntelligenceGroupBlog_OlympicDestroyerTakesAimAtWinterOlympics.pdf (Click name to open as page)	N/A	N/A	19ab44a1343db19741b0e0b06bacce55990b6c8f789815daaf3476e0cc30ebea 3337e3875b05e0bfba69ab926532e3f179e8cfbf162ebb60ce58a0281437a7ef f188abc33d351c2254d794b525c5a8b79ea78acd3050cd8d27d3ecfc568c2936 ae9a4e244a9b3c77d489dee8aeaf35a7c3ba31b210e76d81ef2e91790f052c85 a7d6dcdf5ca2c426cc6c447cff76834d97bc1fdff2cd14bad0b7c2817408c334 d934cb8d0eadb93f8a57a9b8853c5db218d5db78c16a35f374e413884d915016 ab5bf79274b6583a00be203256a4eacfa30a37bc889b5493da9456e2d5885c7f 3e27b6b287f0b9f7e85bfe18901d961110ae969d58b44af15b1d75be749022c2 28858cc6e05225f7d156d1c6a21ed11188777fa0a752cb7b56038d79a88627cc edb1ff2521fb4bf748111f92786d260d40407a2e8463dcd24bb09f908ee13eb9

CiscosTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf

Report name	Domains	Hosts	Samples
CiscosTalosIntelligenceGroupBlog_NavRATUsesUS-NorthKoreaSummitAsDecoyForAttacksInSouthKorea.pdf (Click name to open as page)	daum.net blog.talosintelligence.com artndesign2.cafe24.com mailacounts.com	N/A	e0257d187be69b9bee0a731437bf050d56d213b50a6fd29dd6664e7969f286ef 4f06eaed3dd67ce31e7c8258741cf727964bd271c3590ded828ad7ba8d04ee57 e5f191531bc1c674ea74f8885449f4d934d5f1aa7fd3aaa283fe70f9402b9574

TheUrpageConnectiontoBahamutConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf

Report name	Domains	Hosts	Samples
TheUrpageConnectiontoBahamutConfuciusandPatchwork-TrendLabsSecurityIntelligenceBlog.pdf (Click name to open as page)	le.com lesforinfo.pikpro.eu twitck.com nderfeedback.pikrpro.eu pikrpro.eu appswonder.info	N/A	434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd f1a54dca2fdfe59ec3f537148460364fb5d046c9b4e7db5fc819a9732ae0e063

CiscosTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf

Report name	Domains	Hosts	Samples
CiscosTalosIntelligenceGroupBlog_TargetedAttacksInTheMiddleEast.pdf (Click name to open as page)	fox.foxlove.life jo.foxlove.life le.pro eg.foxlove.life ce-update.services ipify.org smyip.com foxlive.life	N/A	c5bfb5118a999d21e9f445ad6ccb08eb71bc7bd4de9e88a41be9cf732156c525 76a9b603f1f901020f65358f1cbf94c1a427d9019f004a99aa8bff1dea01a881 4b03bea6817f0d5060a1beb8f6ec2297dc4358199d4d203ba18ddfcca9520b48 15f5aaa71bfa3d62fd558a3e88dd5ba26f7638bf2ac653b8d6b8d54dc7e5926b e66af059f37bdd35056d1bb6a1ba3695fc5ce333dc96b5a7d7cc9167e32571c5 d49e9fdfdce1e93615c406ae13ac5f6f68fb7e321ed4f275f328ac8146dd0fc1 1176642841762b3bc1f401a5987dc55ae4b007367e98740188468642ffbd474e af7a4f04435f9b6ba3d8905e4e67cfa19ec5c3c32e9d35937ec0546cce2dd1ff 88e4f306f126ce4f2cd7941cb5d8fcd41bf7d6a54cf01b4a6a4057ed4810d2b6

GoldDragonWidensOlympicsMalwareAttacksGainsPermanentPresenceonVictimsSystems-McAfee.pdf

Report name	Domains	Hosts	Samples
GoldDragonWidensOlympicsMalwareAttacksGainsPermanentPresenceonVictimsSystems-McAfee.pdf (Click name to open as page)	inkboom.co.kr byethost7.com www.golddragon.com nid-help-pchange.atwebpages.com ink.inkboom.co.kr 000webhostapp.com braveprince.com	223.194.70.136 200.200.200.13	35e5310b6183469f4995b7cd4f795da8459087a4 bf21667e4b48b8857020ba455531c9c4f2560740 3a0c617d17e7f819775e48f7edefe9af84a1446b 761b0690cd86fb472738b6dc32661ace5cf18893 11a38a9d23193d9582d02ab0eae767c3933066ec 06948ab527ae415f32ed4b0f0d70be4a86b364a5 96a2fda8f26018724c86b275fe9396e24b26ec9e 5e1326dd7122e2e2aed04ca4de180d16686853a7 bc6cb78e20cb20285149d55563f6fdcf4aaafa58 539acd9145befd7e670fe826c248766f46f0d041 6e13875449beb00884e07a38d0dd2a73afe38283 fef671c13039df24e1606d5fdc65c92fbc1578d9 389db34c3a37fd288e92463302629aa48be06e35 615447f458463dc77f7ae3b0a4ad20ca2303027a 71f337dc65459027f4ab26198270368f68d7ae77 7e74f034d8aa4570bd1b7dcfcdfaa52c9a139361 465d48ae849bbd6505263f3323e818ccb501ba88 a9eb9a1734bb84bbc60df38d4a1e02a870962857 4f58e6a7a04be2b2ecbcdcbae6f281778fdbd9f9

InfrastructureandSamplesofHamasAndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf

Report name	Domains	Hosts	Samples
InfrastructureandSamplesofHamasAndroidMalwareTargetingIsraeliSoldiers-ClearSkyCyberSecurity.pdf (Click name to open as page)	updatemobapp.website www.idf.il project.org mobilestoreupdate.website glancelove.com clearskysec.com www.clearskysec.com www.ci autoandroidup.website goldncup.com www.haaretz.com anew.football.cup.world.com	N/A	8f1b709ae4fb41b32674ca8c41bfcbf7 95a782bd8711ac14ad76b068767515d7 4f9383ae4d0285aeb86e56797f3193f7 5b2aac6372dea167c737b0036e1bd515 b3e40659ae0a0852e2f6eb928d402d9d 7a9503152b4c8c1ee80ac7daf5405a91

UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrickFormbookLokiBotandothermalware_Proofpoint.pdf

Report name	Domains	Hosts	Samples
UnravelingThreadKit_NewdocumentexploitbuilderusedtodistributeTheTrickFormbookLokiBotandothermalware_Proofpoint.pdf (Click name to open as page)	jabb3r.org ce.com xmpp.jp viruscheckmate.com test1.ru seliodrones.info scan4you.net www.proofpoint.com reaqta.com blog.0x3a.com cofense.com	N/A	c73c570208059e0a7b712d835c0de1def72d346a0d623508203b3061c63955ff 2bb9d0d8166a8d330cb3c5be6fb60539fe29e05cc3acb4ac7ec3da233fb013ec 53e8890f0d002d9611675419b3d8d0899b599c59f4557e105211d294bf92f023 877da1bc247c3a0406e29f1cbe50e89b6b53f070957b2d34d10a44fca66e6e49 094ec9e51a559f93e920643a1167de6ee966076af6ab89f24143e9e53b6f9e11 5528b7baa2be1b02140378b076efdbb413ea5e7b05541d2be438c6fb7a636dfe 030ce92b54ae176b116b6d1baa4769d0298f7283dcc1632f6184713e7ec8fdee 8e1c6f44b02e72b1c1c9af0ffdcee0fbe67fb8ee370bc67e4e01ec43f8b92ec9

CiscosTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf

Report name	Domains	Hosts	Samples
CiscosTalosIntelligenceGroupBlog_WhoWasn’tResponsibleforOlympicDestroyer_.pdf (Click name to open as page)	N/A	N/A	ae086350239380f56470c19d6a200f7d251c7422c7bc5ce74730ee8bab8e6283 23e5bb2369080a47df8284e666cac7cafc207f3472474a9149f88c1a4fd7a9b0 5b7c970fee7ebe08d50665f278d47d0e34c04acc19a91838de6a3fc63a8e5630

CiscosTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf

Report name	Domains	Hosts	Samples
CiscosTalosIntelligenceGroupBlog_Flash0DayInTheWild_Group123AtTheControls.pdf (Click name to open as page)	www.1588-2040.co.kr www.dylboiler.co.kr www.korea-tax.info	N/A	3b1395f620e428c5f68c6497a2338da0c4f749feb64e8f12e4c5b1288cc57a1c fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0