+ All Categories
Home > Documents > Indicator of compromise (IoC) of REvil ransomware REvil ...

Indicator of compromise (IoC) of REvil ransomware REvil ...

Date post: 01-Feb-2022
Category:
Upload: others
View: 1 times
Download: 0 times
Share this document with a friend
27
Indicator of compromise (IoC) of REvil ransomware REvil ransomware 'Sodinokibi', also known as 'REvil' is a name for a family of Advanced Ransomware. It encrypts (makes files and folders unreadable) important files in various formats and demands a ransom to decrypt (make files and folders readable) them. Sodinokibi, also known as ‘REvil’, is a ransomware-as-a-service (RaaS) model, discovered in April 2019. REvil ransomware operators have been observed while scanning one of their victim's network for Point of Sale (PoS) servers by researchers with Symantec's Threat Intelligence team. Its multiple infection vectors include exploiting known security vulnerabilities and phishing campaigns. Sodinokibi encrypts a user’s files and can gain administrative access by exploiting known vulnerability. Basic security recommendation Make regular backups of important files, both locally and externally. Do not download files from suspicious sources or click on suspicious links. Do not provide personal information when answering an email, unsolicited phone call, text message or instant message. Phishers will try to trick employees into installing malware, or gain intelligence for attacks by claiming to be from IT. Be sure to contact your IT department if you or your coworkers receive suspicious calls. Use reputable antivirus software and a firewall. Maintaining a strong firewall and keeping your security software up to date are critical. It’s important to use antivirus software from a reputable company because of all the fake software out there.Do employ content scanning and filtering on your mail servers. Do make sure that all systems and software are up-to-date with relevant patches. Indicators of Compromise (IoCs) Indicator of compromise (IoC) in computer forensics is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. boosthybrid.com.au makeitcount.at danubecloud.com takeflat.com new.devon.gov.uk huesges-gruppe.de theclubms.com hoteledenpadova.it plastidip.com.ar zimmerei-fl.de whittier5k.com cityorchardhtx.com greenko.pl eadsmurraypugh.com yousay.site autopfand24.de
Transcript

Indicator of compromise (IoC) of REvil ransomware

REvil ransomware

'Sodinokibi', also known as 'REvil' is a name for a family of Advanced Ransomware. It encrypts

(makes files and folders unreadable) important files in various formats and demands a ransom to

decrypt (make files and folders readable) them.

Sodinokibi, also known as ‘REvil’, is a ransomware-as-a-service (RaaS) model, discovered in April

2019. REvil ransomware operators have been observed while scanning one of their victim's network

for Point of Sale (PoS) servers by researchers with Symantec's Threat Intelligence team.

Its multiple infection vectors include exploiting known security vulnerabilities and phishing

campaigns. Sodinokibi encrypts a user’s files and can gain administrative access by exploiting known

vulnerability.

Basic security recommendation

• Make regular backups of important files, both locally and externally.

• Do not download files from suspicious sources or click on suspicious links.

• Do not provide personal information when answering an email, unsolicited phone call, text

message or instant message. Phishers will try to trick employees into installing malware, or

gain intelligence for attacks by claiming to be from IT. Be sure to contact your IT department

if you or your coworkers receive suspicious calls.

• Use reputable antivirus software and a firewall. Maintaining a strong firewall and keeping

your security software up to date are critical. It’s important to use antivirus software from a

reputable company because of all the fake software out there.Do employ content scanning

and filtering on your mail servers.

• Do make sure that all systems and software are up-to-date with relevant patches.

Indicators of Compromise (IoCs)

Indicator of compromise (IoC) in computer forensics is an artifact observed on a network or in an

operating system that, with high confidence, indicates a computer intrusion.

boosthybrid.com.au makeitcount.at danubecloud.com takeflat.com new.devon.gov.uk huesges-gruppe.de theclubms.com hoteledenpadova.it plastidip.com.ar zimmerei-fl.de whittier5k.com cityorchardhtx.com greenko.pl eadsmurraypugh.com yousay.site autopfand24.de

artotelamsterdam.com ftlc.es waywithwords.net skanah.com unetica.fr rksbusiness.com simpliza.com ora-it.de geekwork.pl faroairporttransfers.net microcirc.net uimaan.fi peterstrobos.com wychowanieprzedszkolne.pl marietteaernoudts.nl lichencafe.com withahmed.com fundaciongregal.org zervicethai.co.th zso-mannheim.de compliancesolutionsstrategies.com retroearthstudio.com corelifenutrition.com maasreusel.nl consultaractadenacimiento.com deprobatehelp.com effortlesspromo.com enovos.de globedivers.wordpress.com bastutunnan.se atmos-show.com surespark.org.uk radaradvies.nl em-gmbh.ch idemblogs.com iyengaryogacharlotte.com wien-mitte.co.at sweering.fr huehnerauge-entfernen.de ihr-news.jp mikeramirezcpa.com parkcf.nl sla-paris.com parkstreetauto.net sexandfessenjoon.wordpress.com maratonaclubedeportugal.com mylovelybluesky.com connectedace.com asiluxury.com wari.com.pe dutchbrewingcoffee.com

amylendscrestview.com minipara.com rocketccw.com wacochamber.com anybookreader.de rimborsobancario.net heurigen-bauer.at purposeadvisorsolutions.com y-archive.com paulisdogshop.de navyfederalautooverseas.com aco-media.nl spsshomeworkhelp.com tomaso.gr upmrkt.co spacecitysisters.org drinkseed.com forskolorna.org zewatchers.com fannmedias.com spd-ehningen.de ohidesign.com creative-waves.co.uk desert-trails.com troegs.com abogadoengijon.es the-virtualizer.com urmasiimariiuniri.ro castillobalduz.es rafaut.com rollingrockcolumbia.com dekkinngay.com restaurantesszimmer.de mylolis.com caribdoctor.org cirugiauretra.es eglectonk.online colorofhorses.com smokeysstoves.com thewellnessmimi.com hellohope.com 1team.es alten-mebel63.ru dw-css.de teczowadolina.bytom.pl tenacitytenfold.com drugdevice.org toponlinecasinosuk.co.uk iwelt.de thailandholic.com hkr-reise.de

schlafsack-test.net mirjamholleman.nl xn--rumung-bua.online vannesteconstruct.be chrissieperry.com brevitempore.net nuzech.com sloverse.com xn--vrftet-pua.biz humancondition.com mooshine.com alfa-stroy72.com offroadbeasts.com americafirstcommittee.org lapinvihreat.fi chatizel-paysage.fr deepsouthclothingcompany.com allfortheloveofyou.com rushhourappliances.com international-sound-awards.com aodaichandung.com nandistribution.nl lebellevue.fr camsadviser.com highimpactoutdoors.net brandl-blumen.de parking.netgateway.eu modamilyon.com cafemattmeera.com csgospeltips.se bauertree.com gratispresent.se solerluethi-allart.ch tophumanservicescourses.com siliconbeach-realestate.com marketingsulweb.com hotelzentral.at hmsdanmark.dk walter-lemm.de softsproductkey.com andersongilmour.co.uk rota-installations.co.uk talentwunder.com boulderwelt-muenchen-west.de corona-handles.com euro-trend.pl syndikat-asphaltfieber.de kamahouse.net cuppacap.com cursoporcelanatoliquido.online videomarketing.pro

mmgdouai.fr theduke.de gastsicht.de pridoxmaterieel.nl 101gowrie.com echtveilig.nl promesapuertorico.com caribbeansunpoker.com lorenacarnero.com romeguidedvisit.com acomprarseguidores.com dareckleyministries.com darrenkeslerministries.com myzk.site sotsioloogia.ee erstatningsadvokaterne.dk work2live.de micro-automation.de cleliaekiko.online wasmachtmeinfonds.at airconditioning-waalwijk.nl podsosnami.ru micahkoleoso.de berliner-versicherungsvergleich.de punchbaby.com oncarrot.com kedak.de fotoscondron.com themadbotter.com body-armour.online insp.bi physiofischer.de space.ua lachofikschiet.nl phantastyk.com dezatec.es charlottepoudroux-photographie.fr associationanalytics.com vox-surveys.com daniel-akermann-architektur-und-planung.ch hugoversichert.de assurancesalextrespaille.fr latestmodsapks.com embracinghiscall.com webcodingstudio.com kafu.ch digivod.de dinslips.se mapawood.com theapifactory.com michaelsmeriglioracing.com

piajeppesen.dk mastertechengineering.com smart-light.co.uk lefumetdesdombes.com antiaginghealthbenefits.com jameskibbie.com coding-machine.com mediaclan.info sairaku.net systemate.dk comparatif-lave-linge.fr craigmccabe.fun gantungankunciakrilikbandung.com herbstfeststaefa.ch iwr.nl buroludo.nl innote.fi bestbet.com carlosja.com 365questions.org milltimber.aberdeen.sch.uk promalaga.es all-turtles.com alvinschwartz.wordpress.com socstrp.org gopackapp.com makeurvoiceheard.com mariposapropaneaz.com slashdb.com shsthepapercut.com katiekerr.co.uk bigbaguettes.eu transliminaltribe.wordpress.com cortec-neuro.com smejump.co.th zimmerei-deboer.de newstap.com.ng vetapharma.fr manifestinglab.com onlybacklink.com sandd.nl trulynolen.co.uk live-con-arte.de fitnessingbyjessica.com puertamatic.es pier40forall.org shiresresidential.com dnepr-beskid.com.ua creamery201.com devstyle.org asgestion.com

amerikansktgodis.se bodyforwife.com iviaggisonciliegie.it finde-deine-marke.de augenta.com lecantou-coworking.com seitzdruck.com testcoreprohealthuk.com argos.wityu.fund patrickfoundation.net corola.es liikelataamo.fi marcuswhitten.site baumkuchenexpo.jp tinyagency.com delawarecorporatelaw.com solhaug.tk modelmaking.nl balticdermatology.lt lmtprovisions.com blacksirius.de bee4win.com smartypractice.com daklesa.de gw2guilds.org heliomotion.com ceres.org.au cheminpsy.fr vorotauu.ru zweerscreatives.nl gonzalezfornes.es uranus.nl kojinsaisei.info markelbroch.com helenekowalsky.com sporthamper.com montrium.com merzi.info binder-buerotechnik.at antonmack.de mooglee.com mountaintoptinyhomes.com otsu-bon.com allentownpapershow.com bargningavesta.se lubetkinmediacompanies.com blood-sports.net blogdecachorros.com bloggyboulga.net suncrestcabinets.ca advokathuset.dk

mousepad-direkt.de porno-gringo.com x-ray.ca bridgeloanslenders.com groupe-cets.com wraithco.com luxurytv.jp foretprivee.ca todocaracoles.com psnacademy.in besttechie.com panelsandwichmadrid.es skiltogprint.no haar-spange.com penco.ie schraven.de you-bysia.com.au kaliber.co.jp songunceliptv.com teknoz.net ilcdover.com pubweb.carnet.hr gemeentehetkompas.nl bouquet-de-roses.com planchaavapor.net autofolierung-lu.de no-plans.com tradiematepro.com.au krlosdavid.com ladelirante.fr clos-galant.com luckypatcher-apkz.com supportsumba.nl qualitaetstag.de advizewealth.com myhealth.net.au run4study.com better.town igrealestate.com bargningharnosand.se stoeberstuuv.de sauschneider.info alysonhoward.com braffinjurylawfirm.com nacktfalter.de summitmarketingstrategies.com hvccfloorcare.com edv-live.de bunburyfreightservices.com.au sagadc.com otto-bollmann.de

aarvorg.com garage-lecompte-rouen.fr div-vertriebsforschung.de xoabigail.com toreria.es completeweddingkansas.com huissier-creteil.com c-a.co.in lynsayshepherd.co.uk visiativ-industry.fr ecoledansemulhouse.fr quickyfunds.com stopilhan.com nativeformulas.com hashkasolutindo.com travelffeine.com labobit.it abitur-undwieweiter.de sahalstore.com jacquin-maquettes.com xlarge.at jolly-events.com bodyfulls.com architekturbuero-wagner.net 2ekeus.nl berlin-bamboo-bikes.org sportsmassoren.com lange.host rehabilitationcentersinhouston.net ligiercenter-sachsen.de readberserk.com biortaggivaldelsa.com jvanvlietdichter.nl c2e-poitiers.com ampisolabergeggi.it aurum-juweliere.de nestor-swiss.ch mrsplans.net marathonerpaolo.com nsec.se edgewoodestates.org firstpaymentservices.com strandcampingdoonbeg.com cerebralforce.net mrtour.site precisionbevel.com roygolden.com haremnick.com lukeshepley.wordpress.com adoptioperheet.fi slimidealherbal.com

interactcenter.org kaotikkustomz.com architecturalfiberglass.org conasmanagement.de forestlakeuca.org.au kostenlose-webcams.com irishmachineryauctions.com schoellhammer.com opatrovanie-ako.sk shiftinspiration.com naturavetal.hr ncid.bc.ca symphonyenvironmental.com oslomf.no victoriousfestival.co.uk saka.gr smithmediastrategies.com finediningweek.pl maxadams.london mdk-mediadesign.de digi-talents.com geisterradler.de spargel-kochen.de kampotpepper.gives kidbucketlist.com.au schutting-info.nl iphoneszervizbudapest.hu mindpackstudios.com villa-marrakesch.de slimani.net trystana.com evangelische-pfarrgemeinde-tuniberg.de worldhealthbasicinfo.com teresianmedia.org ouryoungminds.wordpress.com ncuccr.org lykkeliv.net krcove-zily.eu smhydro.com.pl easytrans.com.au werkkring.nl smalltownideamill.wordpress.com sabel-bf.com refluxreducer.com kalkulator-oszczednosci.pl rieed.de DupontSellsHomes.com groupe-frayssinet.fr tarotdeseidel.com cursosgratuitosnainternet.com spinheal.ru

roadwarrior.app basisschooldezonnewijzer.nl tampaallen.com croftprecision.co.uk platformier.com zenderthelender.com kingfamily.construction noixdecocom.fr faronics.com pierrehale.com leoben.at latribuessentielle.com d1franchise.com bricotienda.com marchand-sloboda.com bbsmobler.se foryourhealth.live tips.technology stacyloeb.com coding-marking.com gasolspecialisten.se dlc.berlin presseclub-magdeburg.de hebkft.hu geoffreymeuli.com filmstreamingvfcomplet.be dubscollective.com carriagehousesalonvt.com love30-chanko.com rerekatu.com milanonotai.it bigasgrup.com raschlosser.de pelorus.group abuelos.com winrace.no ino-professional.ru commonground-stories.com xn--fn-kka.no fensterbau-ziegler.de girlillamarketing.com centrospgolega.com vitalyscenter.es vdberg-autoimport.nl ianaswanson.com norovirus-ratgeber.de goodgirlrecovery.com plotlinecreative.com id-et-d.fr blossombeyond50.com notsilentmd.org

pmcimpact.com collaborativeclassroom.org noskierrenteria.com urist-bogatyr.ru dontpassthepepper.com aprepol.com mooreslawngarden.com plantag.de tux-espacios.com evergreen-fishing.com spectrmash.ru biapi-coaching.fr kosterra.com tanzschule-kieber.de beautychance.se mymoneyforex.com saarland-thermen-resort.com d2marketing.co.uk lionware.de danholzmann.com stoeferlehalle.de almosthomedogrescue.dog makeflowers.ru celeclub.org ausair.com.au handi-jack-llc.com actecfoundation.org carolinepenn.com seproc.hn citymax-cr.com employeesurveys.com nmiec.com campusoutreach.org calabasasdigest.com allamatberedare.se aunexis.ch nachhilfe-unterricht.com praxis-foerderdiagnostik.de botanicinnovations.com torgbodenbollnas.se zonamovie21.net esope-formation.fr manijaipur.com nokesvilledentistry.com executiveairllc.com allure-cosmetics.at gmto.fr kadesignandbuild.co.uk mir-na-iznanku.com pasivect.co.uk dr-tremel-rednitzhembach.de

mediaplayertest.net pferdebiester.de analiticapublica.es hexcreatives.co journeybacktolife.com rhinosfootballacademy.com bouncingbonanza.com ecpmedia.vn elimchan.com sanyue119.com bafuncs.org knowledgemuseumbd.com synlab.lt judithjansen.com icpcnj.org polychromelabs.com schoolofpassivewealth.com izzi360.com transportesycementoshidalgo.es atozdistribution.co.uk nancy-informatique.fr bsaship.com pivoineetc.fr healthyyworkout.com ziegler-praezisionsteile.de theadventureedge.com polzine.net art2gointerieurprojecten.nl tetinfo.in herbayupro.com petnest.ir deko4you.at yourobgyn.net ahouseforlease.com shadebarandgrillorlando.com apolomarcas.com pay4essays.net thomasvicino.com pogypneu.sk pasvenska.se levdittliv.se pomodori-pizzeria.de directwindowco.com charlesreger.com norpol-yachting.com happyeasterimages.org comarenterprises.com ctrler.cn hannah-fink.de tanzprojekt.com lbcframingelectrical.com

baronloan.org buymedical.biz moveonnews.com crowd-patch.co.uk kirkepartner.dk classycurtainsltd.co.uk admos-gleitlager.de midmohandyman.com lucidinvestbank.com philippedebroca.com fairfriends18.de waermetauscher-berechnen.de heidelbergartstudio.gallery jerling.de lescomtesdemean.be socialonemedia.com epwritescom.wordpress.com cwsitservices.co.uk dpo-as-a-service.com homng.net lusak.at servicegsm.net helikoptervluchtnewyork.nl chaotrang.com femxarxa.cat johnsonfamilyfarmblog.wordpress.com bookspeopleplaces.com craigvalentineacademy.com homesdollar.com friendsandbrgrs.com pv-design.de thenewrejuveme.com kao.at samnewbyjax.com asteriag.com farhaani.com unim.su sobreholanda.com maineemploymentlawyerblog.com tulsawaterheaterinstallation.com ra-staudte.de klusbeter.nl bierensgebakkramen.nl baustb.de paymybill.guru centuryrs.com artallnightdc.com slupetzky.at ivivo.es highlinesouthasc.com kamienny-dywan24.pl

vancouver-print.ca autodemontagenijmegen.nl deltacleta.cat rozemondcoaching.nl nosuchthingasgovernment.com christ-michael.net vitavia.lt boompinoy.com loprus.pl yassir.pro wsoil.com.sg siluet-decor.ru katketytaanet.fi karacaoglu.nl trackyourconstruction.com frontierweldingllc.com theshungiteexperience.com.au partnertaxi.sk centromarysalud.com testzandbakmetmening.online the-domain-trader.com ontrailsandboulevards.com wmiadmin.com dramagickcom.wordpress.com hrabritelefon.hr i-arslan.de dr-seleznev.com blumenhof-wegleitner.at webmaster-peloton.com n1-headache.com hiddencitysecrets.com.au outcomeisincome.com hihaho.com mercantedifiori.com drnice.de tecnojobsnet.com fax-payday-loans.com imperfectstore.com rebeccarisher.com walkingdeadnj.com longislandelderlaw.com gasbarre.com mytechnoway.com 4youbeautysalon.com catholicmusicfest.com kmbshipping.co.uk vermoote.de sojamindbody.com fizzl.ru dushka.ua aniblinova.wordpress.com

irinaverwer.com bundabergeyeclinic.com.au aminaboutique247.com aakritpatel.com jobcenterkenya.com leather-factory.co.jp strategicstatements.com blgr.be celularity.com streamerzradio1.site crediacces.com smessier.com woodleyacademy.org kikedeoliveira.com mdacares.com ditog.fr naturalrapids.com answerstest.ru sevenadvertising.com behavioralmedicinespecialists.com nhadatcanho247.com pcp-nc.com triggi.de vloeren-nu.nl freie-gewerkschaften.de fatfreezingmachines.com fitovitaforum.com commercialboatbuilding.com leeuwardenstudentcity.nl koko-nora.dk associacioesportivapolitg.cat lillegrandpalais.com dr-pipi.de baylegacy.com freie-baugutachterpraxis.de westdeptfordbuyrite.com remcakram.com hushavefritid.dk hhcourier.com flexicloud.hk ravensnesthomegoods.com kath-kirche-gera.de financescorecard.com team-montage.dk newyou.at iqbalscientific.com 123vrachi.ru balticdentists.com maureenbreezedancetheater.org ncs-graphic-studio.com shhealthlaw.com

ymca-cw.org.uk serce.info.pl higadograsoweb.com vibethink.net eraorastudio.com edelman.jp elpa.se stampagrafica.es boldcitydowntown.com rosavalamedahr.com ralister.co.uk poultrypartners.nl delchacay.com.ar simpkinsedwards.co.uk dubnew.com lenreactiv-shop.ru galleryartfair.com tinkoff-mobayl.ru launchhubl.com myhostcloud.com verifort-capital.de entopic.com spylista.com xltyu.com kaminscy.com kevinjodea.com muamuadolls.com autodujos.lt pickanose.com bogdanpeptine.ro homecomingstudio.com odiclinic.org hotelsolbh.com.br bptdmaluku.com henricekupper.com degroenetunnel.com profectis.de appsformacpc.com diversiapsicologia.es drfoyle.com ostheimer.at greenpark.ch stormwall.se quemargrasa.net nijaplay.com tastewilliamsburg.com abogadosaccidentetraficosevilla.es personalenhancementcenter.com adultgamezone.com ogdenvision.com ecopro-kanto.com

babcockchurch.org reddysbakery.com seagatesthreecharters.com nicoleaeschbachorg.wordpress.com real-estate-experts.com cactusthebrand.com imadarchid.com tongdaifpthaiphong.net kissit.ca littlebird.salon kariokids.com ausbeverage.com.au lapmangfpt.info.vn crowcanyon.com alsace-first.com southeasternacademyofprosthodontics.org maryloutaylor.com miraclediet.fun psc.de vyhino-zhulebino-24.ru cuspdental.com crosspointefellowship.church zieglerbrothers.de logopaedie-blomberg.de xn--logopdie-leverkusen-kwb.de stemenstilte.nl osterberg.fi broseller.com rostoncastings.co.uk artige.com quizzingbee.com mbfagency.com jandaonline.com woodworkersolution.com nvwoodwerks.com evologic-technologies.com stefanpasch.me leda-ukraine.com.ua layrshift.eu mepavex.nl jsfg.com milestoneshows.com ventti.com.ar falcou.fr upplandsspar.se coastalbridgeadvisors.com baptisttabernacle.com triactis.com mank.de twohourswithlena.wordpress.com bingonearme.org

darnallwellbeing.org.uk mrsfieldskc.com datacenters-in-europe.com first-2-aid-u.com antenanavi.com ledmes.ru fitnessbazaar.com agence-chocolat-noir.com miriamgrimm.de stupbratt.no extraordinaryoutdoors.com bildungsunderlebnis.haus lapinlviasennus.fi selfoutlet.com cyntox.com jbbjw.com web.ion.ag galserwis.pl beyondmarcomdotcom.wordpress.com devlaur.com destinationclients.fr jorgobe.at backstreetpub.com modestmanagement.com brigitte-erler.com htchorst.nl vihannesporssi.fi ilso.net fransespiegels.nl imaginado.de igfap.com joseconstela.com oemands.dk sportiomsportfondsen.nl coffreo.biz qualitus.com polymedia.dk sanaia.com thedad.com vanswigchemdesign.com kindersitze-vergleich.de tomoiyuma.com jakekozmor.com agence-referencement-naturel-geneve.net ki-lowroermond.nl seminoc.com sw1m.ru monark.com lightair.com id-vet.com gamesboard.info

ftf.or.at educar.org simoneblum.de yamalevents.com liveottelut.com sipstroysochi.ru greenfieldoptimaldentalcare.com ussmontanacommittee.us people-biz.com bhwlawfirm.com 12starhd.online operaslovakia.sk sinal.org theletter.company tuuliautio.fi 1kbk.com.ua hardinggroup.com qlog.de anteniti.com pinkexcel.com justinvieira.com naturstein-hotte.de mbxvii.com mrxermon.de sterlingessay.com fayrecreations.com senson.fi waveneyrivercentre.co.uk christinarebuffetcourses.com thomas-hospital.de denovofoodsgroup.com kisplanning.com.au grelot-home.com tigsltd.com carrybrands.nl controldekk.com schmalhorst.de verytycs.com atalent.fi aglend.com.au mediaacademy-iraq.org gporf.fr gymnasedumanagement.com waynela.com caffeinternet.it www1.proresult.no arteservicefabbro.com kenhnoithatgo.com oneheartwarriors.at apprendrelaudit.com live-your-life.jp

pcprofessor.com simplyblessedbykeepingitreal.com facettenreich27.de zzyjtsgls.com harveybp.com ai-spt.jp pixelarttees.com lascuola.nl klimt2012.info joyeriaorindia.com stallbyggen.se stoneys.ch sachnendoc.com paradicepacks.com cnoia.org edrcreditservices.nl cimanchesterescorts.co.uk filmvideoweb.com thedresserie.com revezlimage.com vietlawconsultancy.com eaglemeetstiger.de brawnmediany.com global-kids.info pt-arnold.de julis-lsa.de alhashem.net mirkoreisser.de bayoga.co.uk levihotelspa.fi hairstylesnow.site argenblogs.com.ar jobmap.at jasonbaileystudio.com wolf-glas-und-kunst.de pmc-services.de noesis.tech blewback.com naswrrg.org nakupunafoundation.org trapiantofue.it instatron.net simulatebrain.com coursio.com igorbarbosa.com hypozentrum.com neuschelectrical.co.za nurturingwisdom.com seevilla-dr-sturm.at fotoideaymedia.es tonelektro.nl

sarbatkhalsafoundation.org sportverein-tambach.de jyzdesign.com jeanlouissibomana.com anthonystreetrimming.com slwgs.org bristolaeroclub.co.uk ivfminiua.com xn--fnsterputssollentuna-39b.se candyhouseusa.com xn--thucmctc-13a1357egba.com onlyresultsmarketing.com nataschawessels.com abogados-en-alicante.es hatech.io pocket-opera.de narcert.com abogadosadomicilio.es craftleathermnl.com resortmtn.com mezhdu-delom.ru danskretursystem.dk kojima-shihou.com intecwi.com smale-opticiens.nl urclan.net sofavietxinh.com meusharklinithome.wordpress.com truenyc.co praxis-management-plus.de chefdays.de renergysolution.com copystar.co.uk bordercollie-nim.nl campus2day.de jusibe.com bxdf.info bowengroup.com.au conexa4papers.trade abl1.net austinlchurch.com bigler-hrconsulting.ch veybachcenter.de 35-40konkatsu.net verbisonline.com ceid.info.tr oceanastudios.com limassoldriving.com importardechina.info birnam-wood.com corendonhotels.com

psa-sec.de smogathon.com pointos.com scenepublique.net liliesandbeauties.org ccpbroadband.com perbudget.com 4net.guru beaconhealthsystem.org turkcaparbariatrics.com i-trust.dk insigniapmg.com tennisclubetten.nl thee.network despedidascostablanca.es portoesdofarrobo.com chavesdoareeiro.com boisehosting.net deoudedorpskernnoordwijk.nl gaiam.nl madinblack.com saxtec.com gadgetedges.com humanityplus.org macabaneaupaysflechois.com dirittosanitario.biz glennroberts.co.nz myteamgenius.com deschl.net plv.media thaysa.com parebrise-tla.fr cranleighscoutgroup.org itelagen.com aselbermachen.com jiloc.com manutouchmassage.com malychanieruchomoscipremium.com figura.team richard-felix.co.uk whyinterestingly.ru harpershologram.wordpress.com jenniferandersonwriter.com houseofplus.com accountancywijchen.nl fibrofolliculoma.info notmissingout.com exenberger.at blog.solutionsarchitect.guru body-guards.it lloydconstruction.com

durganews.com vibehouse.rw solinegraphic.com devok.info ikads.org thefixhut.com cite4me.org ateliergamila.com vickiegrayimages.com milsing.hr ruralarcoiris.com danielblum.info iyahayki.nl expandet.dk tanciu.com stingraybeach.com morawe-krueger.de hairnetty.wordpress.com oldschoolfun.net eco-southafrica.com 8449nohate.org olejack.ru projetlyonturin.fr vesinhnha.com.vn fiscalsort.com securityfmm.com officehymy.com memaag.com havecamerawilltravel2017.wordpress.com denifl-consulting.at wurmpower.at koken-voor-baby.nl mardenherefordshire-pc.gov.uk kuntokeskusrok.fi extensionmaison.info grupocarvalhoerodrigues.com.br juneauopioidworkgroup.org mountsoul.de prochain-voyage.net parks-nuernberg.de dutchcoder.nl webhostingsrbija.rs faizanullah.com courteney-cox.net 321play.com.hk tandartspraktijkhartjegroningen.nl tsklogistik.eu starsarecircular.org pawsuppetlovers.com rumahminangberdaya.com kunze-immobilien.de

proudground.org insidegarage.pl calxplus.eu shonacox.com funjose.org.gt ungsvenskarna.se bradynursery.com bockamp.com oneplusresource.org bimnapratica.com dublikator.com familypark40.com musictreehouse.net wellplast.se ilive.lt tstaffing.nl bouldercafe-wuppertal.de burkert-ideenreich.de xtptrack.com hokagestore.com dsl-ip.de 102.129.224.148 23.81.143.21 5.101.0.202 d2zblloliromfu.cloudfront.net https://pastebin.com/raw/09FvgM1g https://pastebin.com/raw/4DhjNfkK https://pastebin.com/raw/kehkNbH6 https://pastebin.com/raw/Q9FdzgH2 https://pastebin.com/raw/QtwtkUR0 licor43.de satyayoga.de steampluscarpetandfloors.com ulyssemarketing.com linnankellari.fi chandlerpd.com tandartspraktijkheesch.nl xn--singlebrsen-vergleich-nec.com zflas.com stemplusacademy.com jadwalbolanet.info Hash's b10d9a62edb6081aa9f7fc865554064bb212555392b1181dc40040e12927f988 c8466c386261facf38ce62e75a8c6414affbfaed439e91fa00e515e079702fe0 bbcaee51155609d365f6bb297d124efea685df0243ec1d4efb5043d9afe5963d 9f79ea51439742e0888abd4273b62bcd247d1c72ea4f729ee870669a13f192c5 9b183afcfccc12af90f82c5f5b8a077bd8c77cf815c62e946a0dfdb4bc78847f cbf87c3fce4c8608fcc1b1960cc4dc305addfdae889ee3998629d18d8ed2ee1c 1363b70d46c3af4d0794ecf650e3f50ceb3f81302e6059e42d94838e9ada1111

b80b9aa14af3d1af9246b14855d717ef5bd3ad0c26978c312b74323a2da0dbe7 2253f5222ebad25243cd8e3d7ac416939a7cf4f52e991ee3bd6e2f2847d28faf f1662bfebf68d8da9879fd50b41536078c0c06ed4616dc388ee78a30ce8ccd27 11aaccd9547fd5a71335f33ce8e48ba37381013e16d4e69d01aa4252cfb17a33 31f5e6d1e938023bbb9fe4f760eb068819e6707e0304d3a16a414103ba1c3cd2 63700da4a03a05b362337224c6245f09dd5e9d72312c600ea0b607107bc82ca0 daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762 2d82bc93b52caad80213eec95e897909c57d75d82a4aec9d1c2fbc204b7104ba c0faf72bb6e93878eba4b86cac0e949336c971172071a89eb9af3ef768804282 37afe4a36a980dd0609f8e6ccfcfe037aa336d16e1ba811d926eed4050e595ec 2d22d812117ff4ca4d8bcbd45ec20c77f52e907bf7320d44f6a4fd6c7beb066e 362fc55f5cd3d5338827de0eafdb7eb34c26885345706852184db95ad9996a5c 462257012d62ead365af0198457c64cc07a0597461ce79496c0f22b91273dcde 982f8e3329ef811bde84fd0cd5009dbfda6ed5e22e10eea796ac128e787f4f50 d41fd38a8478bf788f5dc0acf0e070dd360ddc9bfff0804e6b5254cc0116aa81 d0bf90ab2e04be11a67d7901047a4d0adccc31b436feb4100a09f527a2fe751e 9fb4aca06e67c01e6ae8c11817428cfb8e9206d9bf2fe1126af8bfef3d16835f da74221e6e6eee961014701cd7f8be3805b324a602264b6801e766c4991906be 443140ef94c80b615eeac17cf63580e85cceb57c6c417273a65872ffe0f712b2 995f0ee67d4fdf4e5182fd09d7d1084f35f863e08ac3989c7cf5174e6fe0333c 4cc16f4d2ae63db6a45e397a134fc8fa23d8ab1ec60610a46142403d40ef6454 bbf341ba4e7aec31155e16f82572f6022c413735e63f0550685846945ec95daf 7c9967af20cf6415b6d581d74efaf9e8f9181da92cba43d7b4056f7fab97c976 b831d550b25956a849594b8e00791edcec7d603ed28948259a8ec62f3ef1b21d 0390701032e3b623a9b43927c6374abcb2c040b343147d934cd0c91f638cf8b8 ed70847aeee2bd0df8f5787c4f580bf7b8e46d7f46b8f6e2bf082c4014c90261 d0fb6f4c608994c787f15ee3b5cc1297180687522ade080c07a708e55ce23de8 09e20223d059891d4712c1fd14423ac5aee9177bcb5e4c7e2d8778415f146499 a3cdb3929b4ad03371335e2cb854e5cfb61816821cd4fcb9807e4fac57f65ea4 f97175fdad804a02e6f24273b371184d816044eb2409dadaad683c07fd41e992 d91fb28bbaf54e85e5a87e608c2bb630e7be06815f17541d680823faab4a8fb5 e6af534b1dbee86e294e4110dd70a1dd089feef0c7e4c9946abac7b988fe7763 b2f393fc463cb2b9aaaec34ba98be049fb8d3e747fb61c30d3b7d21d58283d81 61fda8fce4674afd868ceeabd6172d2a6bc95d3b1dbaefaacd8e340cf024726f 4bb9def5bfdddcd575dd7b07800290b37304253979e0d2cc8ee38a52711fd327 c81a1bb8e9db03bf19883977aec6487b0d432635def4c9cc349c4153521542f4 250643c78220f6913f63f9afffc2f2178453b25551d0b0331f571b810e97d146 7f2290df275b8b87c0f8158afec08d1c5201f6112ab01e36ce7cd6fd01e1af6b dad3431f42dd3bac7fa36ed24b40bfb6e8d7ccce71c325ee0c068e7b1a1de1ad 17b89590d4a732821269f81d0e2a307554a516aac41a25386a660efc31f11579 338b9b5ea11c502f5eab38c606740319ae6606e17e29106348cbddc312f0343c c6bbcbd392e5828b0fd1130e4c27cf352415295b0428c6b1ce6707528cfa8502 4265b4461d213a6e99447fc255a5d4de9a18b92756cfb66a247472261ab01154 b7ae354e1227e211b73cbabd1989a86da6018d6abe756c2d16506aff46b3cfa2 6c8887bd717d98663f37f19edb72c350bd622b7112c0ade5fdabd9ba182c67f4 9e7dbf6b828e52dcbed4c6578a5269872ef1bef953efdac803854ee89535c24d 528e1df23dc41f9fe783edab41b3b89f47e9a34c265eb8406261b7bd92158040 f060508128cec81900681d00dcb87346d3f30c883b7a1cd657b93564963462ff 1de6b3564e9f9c57561559de76c7d07231fd0f564f9cf7e46613a722e22de015 4b24e4b296677a0f4de09f6ae3d676efd620fdb040b69c94b8e98f471f5a6454 0a0b908283ec320211e20527ebbb20cad17fc9a7058edfb33d302ec04ab0ac3b

a30e9d09d5962e56f958944acdd7de33e369acfade437743308202f9c975b52a 23a7f703f82e97ad99ba068099435185c7c3798bb468badb47182c615e31fa56 33f75e31c16b0386d8c155ef3ddf08a97106238ca554a2966f1032ae1e736214 aa6280916b0e8991871e59cba0933d41c20960b9d7763cd199e4e42398a094df 2dfcafe237c7b43332d888e8868c4a6c6d992453f9f66cac604903809037dbe4 2f5312ae2a1c8509265493a5082f6263e9bcd25fdabd97da21c68f3afb151d3c ee0a18f121ccf96b1a346f5c6b4c69e735dea57b3f45977a139135d177b266b8 574dc0b771c37baca84b715a97dc31f9c1c50ea1c100c0711b9569f7746c9680 ee6d924628818e6a2fcdcd5b47953d2f55da0c5134516cbf97d1932b897d63ad 49e921914b6aaeff48e1eaeb31c4a38c5d369fa512a34d54665bf171c9b4a68f 14840130ab75587bc52c2f6cab5725e7d23fee87f2ae8b80921738632bd81182 aa48cbb39ba760613c102f08814685c742f92c7e34e357a9a81204170e28ddbc 7b7975cc04c6f440b04a5c9cd41aa8c86a0e6de72b8e8ddc75a6b0e142683a8d 909b520c493bd868b94e361035c425a343786cf06b935d3a01621dffd849e0fe b627eb2aa0953cf6ca40071cd54f8f1d5b036302012adb69704c91a4320def1c 8ecdb6d0e67de0f44098ae8cb8697deaa6e0cc8c45a9cf77f862dbb30e5d2dba 71947b1bb929d72b0451f3810bcc0517c1d1816e927c62675821470ce7a51b0a 16e1978623ce9c48fd18bc77ff78af626b170c5ecfaf8bf3a2c511277040c826 f1cff858f5006ebdb0971652d0f2f36e7ed085fe13ecdaea1ce8384eaba702d7 da025ce7c0f6977da21a1b14de081d828b51ba0488783e042ca747fa96c040b6 1ba80558a948a2e2affe8cc0ac487be65c67eaa1f12acb87071ff34a95fc2f8a bfaa65989845f239db78488783fa72ba55037da1af409376c4e1926d545506cc

News Reference:

• https://www.bleepingcomputer.com/news/security/revil-ransomware-scans-victims-

network-for-point-of-sale-systems/

• https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/sodinokibi-

ransomware-cobalt-strike-pos

• https://us.norton.com/internetsecurity-malware-7-tips-to-prevent-ransomware.html


Recommended