Se han detectado múltiples indicadores de compromiso asociados con campañas de malware en Colombia, los cuales podrían afectar la confidencialidad, integridad y disponibilidad de la información.
Indicadores de compromiso:
C2 - Comando y Control de Malware
186[.]169[.]43[.]64
142[.]202[.]191[.]251[:]8624
45[.]92[.]1[.]64[:]3010
94[.]154[.]35[.]80[:]8674
45[.]133[.]180[.]146[:]7630
45[.]133[.]180[.]146[:]4540
45[.]133[.]180[.]146[:]7760
3[.]234[.]97[.]76[:]8080
37[.]120[.]214[.]122[:]2080
37[.]120[.]214[.]122[:]2090
38[.]96[.]254[.]100[:]3000
45[.]128[.]36[.]170[:]3588
190[.]255[.]87[.]223[:]9595
128[.]90[.]109[.]12[:]9999
207[.]174[.]0[.]178[:]7203
128[.]90[.]107[.]250[:]9999
128[.]90[.]109[.]127[:]9999
DNS Maliciosos Malware
teste258588[.]duckdns[.]org
datesnew12[.]kozow[.]com
blessdx6m50isep[.]dynuddns[.]com
climacool202720270[.]dynuddns[.]net
enviomarch[.]duckdns[.]org
envio10-03[.]duckdns[.]org
110326send[.]duckdns[.]org
microsoft64[.]duckdns[.]org
broadres9[.]duckdns[.]org
duckduckpattii[.]dynuddns[.]net
novatakilleronetwotreeprime[.]dynuddns[.]com
marzomarzo20262026[.]dynuddns[.]net
envio26[.]dynuddns[.]net
enviopola06[.]duckdns[.]org
Descarga de Payload
files[.]wildskreen[.]shop
SHA256 – Archivos maliciosos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