Se ha identificado un incremento en la distribución de malware a través de imágenes en formato .SVG (Scalable Vector Graphics), asociadas con diversas temáticas como procesos de embargo, notificaciones judiciales, designación como jurado de votación, comparendos y transacciones bancarias, entre otras.
Estas imágenes incorporan enlaces que redirigen a la descarga de archivos maliciosos, una vez ejecutados en el equipo de la víctima, permiten al actor de amenaza obtener acceso total al sistema comprometido.
Indicadores de compromiso:
C2 - Comando y Control de Malware
186[.]169[.]75[.]221
186[.]169[.]69[.]59[:]3350
186[.]169[.]81[.]113[:]7760
186[.]169[.]44[.]81[:]6540
162[.]245[.]218[.]27[:]1234
104[.]250[.]161[.]126[:]2090
162[.]245[.]218[.]14[:]1212
162[.]245[.]218[.]26[:]6000
DNS Maliciosos Malware
dnsbank[.]duckdns[.]org
purelohs[.]ddns[.]me
holdsostener[.]ddns[.]me
tarrapruebas[.]duckdns[.]org
pwsdomains[.]duckdns[.]org
dadadsaqdsasd[.]dynuddns[.]com
nuevos[.]kozow[.]com
trabajorcm20262090[.]kozow[.]com
nuevos2926[.]dynuddns[.]com
enviomiultimacarta[.]duckdns[.]org
actualizadoswin11[.]kozow[.]com
Descarga de Payload
www2[.]0zz0[.]com
SHA256 – Archivos maliciosos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 98b8fc2f40faaac57ae21a4872314efa3315000296b150c2a826999ea728788b
70afc538af67a3211e84ec3d47c7ecb31c8b4bd5b82f06ef2fd9821474bd4ef0
fa10b95441c503af1ace26c8fa668c69be8f6557abe4f1a16d78798f5aba4492
e81049ead5784db803d366000b0d5c9e1f42174262975c76a46b379350e0970b
99f7668ba051fc0fc2d9bcdad7b24d0a02132b3d0b8016f0c6f413e76a5f3cc4
5e257628810f09875447f048eac2a25ed2acd1f7c7fae963e46a0329b4391c87
72dbedeb115a905b32d74fe54bd420b7b0bbd66b43127e1e111579576bc144b0
65447e8ffc83037cd538131e83b7f39f772767e5520f59c44f2edc867d16d5a2
0faf6e268cf23bec1ff065ab946fd2e1cb64702704e30a114b802b7225af201a
43726e7a6b70858b09525779cbc1717014ddf5954a3c3c6a8277996451b388fb
9b571c3fcfcb11f15d9dda0998ea0b48fac701c50a8df55f4102c31666cd6520
e8ae6136f71d0e4722c1f5bbf096cda6ca1077c4206e059a9b1ba29c3aaff6aa
58c29520fa311893330de5c628776bca12099f6e77465a08102281d1793f99ac
a97eaea9f6ea88da59b65fbbc701cd6448d7bad6e812409f096d6d0a37914b76
2d2c6b339d36f4dbb563ef73eacde39559e685604f3565b762d2991d4bbdffd3
d56ebc05a81f4cf595dc78e6670ecae082565b6b86a59d3cdff99bcfba5d3079
8abb9a8d79feba1cfa8424fc0668def949dad8189e32ba3dea972bf081a6a6bb
7d73d55a0e0e88db948811156fd427231b60d88c28a4c258a6e64d15bc7ad8af
10bfdd09837ed2cd818bd66adf9920e2e172aefdcf2893397ba0ded27b715459
b2c06cb98da94e8b1b7eca5406f59657eb66120ddf2df3b9afcd14e64d0acc31
03c97973d95e062427c64ea7f631e8aa7c464ff0ca9ac9b5f15517184d999f8d
7349200dc5161c26ebde486e057123e9351318553d7c6c98e55aff836b3b0f32
01b5310c364a7e19361c2d53694cc0b8c3953c16c25e52972c8daa52364b9208
f732294ee7a4dc996698127935256e0b30af2f05704d1d3a296094eb89227c85
42317e086f4a13b6cf1a1ea8f43008d99b9ca54624a279402f5e9065fff7f9ff
d7f7a0013d12ee7721c0b38d209f6065a5404fce740e8093a4dbc6fd082ca9cc
ca6c472147d2e4f93d4f13c818f85621fe7cedc5dcf593acab383f61186ddcb1
01349f626a8dbb31a929d12179656a41b6b369feb880ed0f21e7bf9c552bc885
c14f03a2b50792d739dcf2da00131bc57c0db84fde797b284504379ec49e56eb
cc73fd595d776e3f2f875880a3be99652b01dfb6e72f97d08fd2c676a114ac13
601a1470010ab113085db65e994bc4e3722ebabf8787aa85ac95a188a9331dec
d3074a327fbd7a021f385e345b019d1e70dc3449bc695f0a5247164a5499094e
b00bc4687f60fdf38e9ceadd05bfd8cbb58a2883b2871637a04ee2ec2a65d865
7346c281f6980ace30133a7704b7ad5d7acae154d9e0e3b009c5906d75f591a2
d718b5f3fd75098f2ed40c8e88562c74f4578d7821190e50bc9ffecf256d2e11
13dd81bad9f2710d296f4f94b06c5d3957f38204de47f4d7803afbb9464b02ee
b280613b664b5ab766d77640011c2f52106b97a7b8c7712cc8f6e9f47da8cd08
69c8dbb0cde778984c854a2b198e7b5096c9e8e2165c0f49ac756b46f9b81cc6
70163c7df0a59ec67ad3b5a1e144a381e74ab80c3a2f326a15926403daf8a237
01eabd4f7a623318c8bc8b95bea9d13d2b5e0c438b2633d530f6b67ff48e42c1
cec3e5949ab4684563d81dc38d02eab39194df133cd896bec7f223129e33360c
7e32ee4adba0dd56394c441b8a4167d351217477a8b56037a8a31371b74b14df
0bfef5c270703a366719043c0e7e1be7a4679b68706bdd50f0ece47d969db7b3
b1eddf715f01e95cbfd8b454efec54cecbf82f77ec6a1da218bcf73dfaf04914