Аналитики SEKOIA.IO обнародовали крупную и устойчивую инфраструктуру, используемую для распространения Raccoon и Vidar, вероятно, с начала 2020 года. Соответствующая цепочка заражения, использующая эту инфраструктуру из более чем 250 доменов, использует около сотни поддельных сайтов-каталогов взломанного программного обеспечения, которые перенаправляют на несколько ссылок перед загрузкой полезной нагрузки, размещенной на файлообменных платформах, таких как GitHub.
Indicators of Compromise
IPv4
- 134.122.115.190
- 137.184.159.42
- 137.184.227.198
- 137.184.43.153
- 143.198.164.102
- 143.244.212.228
- 146.190.12.4
- 157.230.87.146
- 159.223.97.209
- 162.243.164.175
Domains
- aboxwithfilez.xyz
- allactivationkey.com
- allcracker.com
- allsoftwarepro.com
- asperhost.xyz
- audioplugins.net
- azilominehostz.xyz
- bdomicfilez.xyz
- binaryfile.cfd
- bitclandng.click
- bitloservx.click
- blakbooot.click
- bnr45iqly.cfd
- bokywodzfa.xyz
- bottlecap1.click
- brownrabr.click
- bubl-filez.xyz
- ceedohostzcomi.xyz
- chondimahiy.xyz
- cl0nytig.xyz
- completecrack.com
- corokeralama.xyz
- corpyfoxiy.xyz
- crackask.com
- crackcow.com
- crackedfilez.com
- cracker01.com
- crackexe.net
- crackeyfree.com
- crackfaqs.com
- crackglobal.com
- crackinges.com
- crackist.com
- cracklet.com
- crack-line.com
- crackmyapps.com
- crackmykeys.com
- crackname.com
- cracknkeys.com
- cracknpc.com
- crackny.com
- crackpcpro.com
- crackproduct.com
- crackre.com
- crackregister.com
- crackrepack.com
- cracks11.com
- cracksbuddy.com
- crackservices.com
- cracksfree.net
- cracks-full.com
- crackspromax.com
- cracksroom.com
- crackstores.com
- cracktera.com
- crack-warez.com
- crackwebs.com
- crack-win.com
- crackwindow.com
- crackzero.com
- crackzsoft.com
- crackzsoft.me
- crookhost.cfd
- crop18king.xyz
- dailycracks.com
- dikshaappforpc.com
- ditlivhostz.xyz
- dll-crack.com
- dllcrackz.com
- easywindowsactivator.com
- entry4hide.cyou
- eros0hostz.xyz
- eroxyhost.xyz
- evosurver.click
- exitlocat.cyou
- fiiezofcloude.xyz
- find2sitrox.xyz
- fishsurver.click
- fitcrack.com
- fizzzhost.xyz
- forevercrack.com
- free-crack.com
- freefiles22.xyz
- freewindowsactivator.com
- full-crack.com
- fullcrackapp.com
- full-cracked.com
- fullcrackfile.com
- fullkeypro.com
- fullportable.com
- full-softwares.com
- geclandz.click
- get4pc.click
- get4pcsoft.click
- giantcrack.com
- gooddata.xyz
- greenbottz.xyz
- hdstreamzforpcdl.com
- heifan2survr.xyz
- hersiz00d.xyz
- hft76yu.cfd
- hificellfon.click
- hitcrackspc.com
- hitpcgames.com
- hosngclowz.cyou
- hy3srver.xyz
- hyphnhostn.xyz
- icrackpro.com
- icracx.com
- iee2kolmoz.xyz
- iglo0host.click
- inshotforpc.com
- itforhost.xyz
- jytibarose.xyz
- keygen4u.com
- keygenguru.net
- kihygenvc.xyz
- kinbo112.xyz
- kinemasterforpcdl.com
- king-host.xyz
- kitefly.xyz
- kitlybitli44.xyz
- klimyteioz2b.xyz
- komikata.click
- koptikbaj4.xyz
- krimikomrew4.xyz
- landkemoty.click
- latestproductkey.com
- license4softs.com
- lowfeedo1.xyz
- loyabonzy.xyz
- lvihostng.click
- macapps-download.com
- macdownloadpro.com
- macgamers.net
- macsoftwarepro.com
- massraphost.xyz
- masterforpc.com
- mattservrz.xyz
- mekaofland.click
- mikavika.click
- minghost.cfd
- minicrack.com
- mo21srver.xyz
- mobilelegendsforpc.com
- mocrack.com
- monitorcrack.click
- moyakanj0.xyz
- myclotb0e.xyz
- myhasrnga.xyz
- myloster2v1.xyz
- mypklboy3.xyz
- mysite-servrz.xyz
- mytallphon.click
- naswarlobi.xyz
- neonhost.click
- newactivationkey.com
- newcracksoft.com
- newlicensekeys.com
- nikuserver.xyz
- nomanpc.com
- nysicforma.xyz
- odibolngup.click
- offsebike.cyou
- onecracks.com
- ooxyzhost.xyz
- opcracks.com
- opetafruith.xyz
- osr1file.xyz
- ovacrack.com
- pandacracks.com
- patchzip.com
- pccracking.click
- pccrackspro.com
- pcgamesguru.com
- pcsoftkit.com
- pepatoniyac.click
- pingatinga.click
- pinkbotts2.xyz
- pirtibox.click
- plugin-torrent.com
- portabledownloads.com
- pozitfiiezi.xyz
- premiumcrack.com
- primrvils.click
- procrackapp.com
- procracklink.com
- procracksfile.com
- procracksoftware.com
- purplbogi.click
- purplebot21.xyz
- qcellphone.click
- qoli-filez.xyz
- quy32-filez.xyz
- ridsosurver1.xyz
- rizonfoggy.xyz
- roizohozt19.xyz
- safehand.xyz
- samdownloads.net
- setserverfile.xyz
- sharemeforpc.com
- sid4time.xyz
- sigmarole.cyou
- sigrat4hyp.xyz
- singlwirre.click
- sitka-pyrok.xyz
- sixcozrevoli.xyz
- slom0wise4.xyz
- slugmefilehos.xyz
- softkeygenpro.com
- softs32.com
- softskeygen.com
- softwarekeygen.com
- surbexdillx.xyz
- survrhostngs.xyz
- tekken3forpc.com
- thecrackfiles.com
- thecracksoftware.com
- thepccrack.com
- tikalandof.click
- tocracks.com
- tolby-file.xyz
- toloserverz.click
- top3hostngc.xyz
- torrdroidforpc.com
- totalcracks.com
- trollhost.xyz
- trycracks.com
- unacademyforpc.com
- uploadpk.com
- uploadproper.net
- urconsolest.click
- urcracks.net
- urhandups.xyz
- urstolupzo.xyz
- uscracks.com
- vig0boat.click
- vst-crack.com
- vst-torrent.net
- vysorforpc.com
- wecracks.com
- whitr0sez.xyz
- windowsactivatorpro.com
- windowscrack.com
- windowspatch.com
- withylndng.click
- woldcup20.cyou
- wowcracks.com
- ww16.ping-host.xyz
- ww16.tolby-file.xyz
- ww25.qoli-filez.xyz
- ww38.tolby-file.xyz
- xo-xohost.xyz
- ycracks.com
- yellokomput.xyz
- yourcracks.com
MD5
- 6a8fddac3de8f8b18c3789d7455a506f
- 963011155b7b84c8850878c68b99445a
- bf6b5f2d76fb058e3e6a38cbdbdd22a5
- c0d7637078d5dfa01af93ab2dda9b426
- cda1504b1d4004c8bf3b90b9035ebeb8
SHA1
- 46832d82bc25c7363f32b3473872936e97cfe990
- af822992f28e35504d8185fa558094e297a749ee
- dfef116bd3994f05476040608d63fd8af19d09d7
- f5f6cdfd1d12df787cf358e0e5eae8483ab6d06e
SHA256
- 4d18cd22365f3f3d714fca4a674014fc7a68d6029da4c53a94fe950189f9c956
- 8c5d344c77678fee2bf370d77313cd82a72442c4128ddfe9b4e32333e60116cd
- b2f86cda9f22b4adc43c5bb08dfc2625619ab487c5f172b35ce190ac6d8782a9
- ed9194aab02f28532a292a55883d17d4c6d9e1398b417c89c49274ef394730c1