Se han detectado múltiples indicadores de compromiso asociados con campañas de malware en Colombia, los cuales podrían afectar la confidencialidad, integridad y disponibilidad de la información.
Indicadores de compromiso
C2 - Comando y Control de Malware:
37[.]120[.]214[.]122[:]3030
45[.]88[.]186[.]31[:]2521
186[.]169[.]57[.]17
186[.]169[.]92[.]40
181[.]206[.]158[.]190[:]3001
91[.]92[.]241[.]79[:]1888
124[.]198[.]132[.]156[:]8006
45[.]83[.]31[.]136[:]1994
45[.]133[.]180[.]146
124[.]198[.]132[.]156[:]8150
185[.]241[.]211[.]26[:]5050
DNS Maliciosos Malware:
loveenvio[.]dynuddns[.]net
kfzparkts[.]duckdns[.]org
envioansyr[.]dynuddns[.]net
ansiratenvio[.]dynuddns[.]net
envi11marz[.]duckdns[.]org
hosnxx[.]kozow[.]com
love[.]negro[.]ink
hosty1111rcvh[.]kozow[.]com
trrroyy026[.]kozow[.]com
envio0016[.]duckdns[.]org
loganwolverin2038[.]duckdns[.]org
elpolacodelsur3[.]duckdns[.]org
systemcopilotdrivers[.]ydns[.]eu
msidownload[.]duckdns[.]org
drogures3[.]duckdns[.]org
envio12-03[.]duckdns[.]org
drogures[.]duckdns[.]org
windowslocalhost11[.]duckdns[.]org
Descarga de Payload:
mapshdi[.]wildscreeen[.]shop
files[.]wildscreeen[.]shop
DNS Phishing:
claro-empresas-frontend[.]vercel[.]app
simit[.]pagos-co[.]cc
simit-descuentos[.]com
colombia[.]transferencias-portal[.]li
portalrecaudomovistr[.]com
icetexbecas[.]com
icetex[.]net[.]co
SHA256 – Archivos maliciosos:
d1ded2e9be6b04bd9d52539021d297878a719725ec6d21ee76b81bbc9d6a5a1f
ca967632bfd909eaaf0a45ac63769c2d10013ff0962b050b24e7c12877daddff
079e56853d0dbc861c393f968de23e5bf3b5561b391d6396b485afc360339a78
f915246436f68348e78d3f597fdc805154f96ab1ee9a9fc929dfbbb0b49ee688
beff6c9677e9cb64d023a3474ce0a3753995d76fcbb3d649133369cd6bf8e006
9b292650344961df8ba0a81a2a326c6d73a3f66df86eec4aef5fee33aad70d26
562650eb0ab66f8dc620ffa76b12fb489abbc64306c6517222afe7487b33f1c1
a082cea2eb0c71589bc338f404cc05cc3473eb4516e8f7c290112a469cff794c
809f841cb11d9f83b237a15e95b9263d7e00afa82155c6bdacb68bfcb9ac91d5
2a764632f4181feed4f18d285300751024d4049e50ac91566ba715a9c8b7c845
2deec41545c531501a8d955228efac8d14c3ae9c6a8a544989bc989cc6763847
11e6938260ab609fb088afbb561a711ae8895fe0999898ffc1e23fc807be0a04
ef1bf368c4cf6be4490496c90e90b02554826931a7f2e04daec14056ffed2594
a8fc01f0e87d51bfd00b7c93f7634c8913d6d30433da50e245c79dc7b8d10ec6
4734facd61aa36b2320260c5993243c2e85fc5d9b770d7534a46643974ecbfaf
56c9b415bb7fea963fc525a5685980cacb658fa63f749609d4f456f0f8ca146d
57e60e7467dc9fc64eecfd154199a1a657aec2f1876e5cab9cc300fea1777db5
2713576c85773c8ef87ac05fa780726c6332aaa805ec45cd55674e6028bfb0c5
446627ef1225d00bb7d8b593ccfbc0d00a2b70f53ac30b674c5f655d0cd46dad
9ba77b96a132e955a9c56ab98853d8db17f194a05e5fa5359fb711670345ff98
af6b16fd1790037e804df636c637bc9d2a26453c8905cc6804979c840f7814ca
dc5c3b2df7ec213a2d1ba3e718b6db73f09aa9d1d1e42f04f30826aaae7e32e0
0d2e8f76aa2cd3fcefd092a7b17453ee5e97b24f9a6149990e3c623d6906b1c5
a475a1baeb6e488fbb294518204aaee55f968fc4ea2e4e55b2ec83dc8fd8014c
a7b3a4d57aa5f8ca0e05c183ce79aa0f18ef9f1c7efc943e6e815d2b13d5f244
3fed235aac4fe140bcb22243fb17d45e36fa977d1f1cb8e18e5bc80948a1942d
e67128b3fd6757a442fe44cbee72993a7a8bbc8d4853c4c19825671dc05325e5
b6abc5768f1df17ccdebc947b705bc50696247ffe700ac43484cbe54b342050d
d1b3f947ace571ceb273538c3af7d542010e73902d174061c6fdc288458a517f
5e474bcf1ac1e8b135f323de1ac7584a718b458144a7d1446767eba1c97ad226
d5e52c7caaa3d612ac2d19250752f3fc91feb88d3ea1ce84fae2477e2187b71c
046ff2bb005aaa6aa5bb69d1716ce1470951e43b3c8a01c425d8e77d33f1d626
47a12f679a77f725b63c9fff7b49552804b67206db760d8ad825e78015f5c757
2e79970821facd206636cfc76a2b52195e81ae9729c7f7850a30f7a35fd134bd
621c848eb66a6f2675417847d904ed547240e417b20908ff73d5c858d10da878
8e4b4c47120791b8e2a9d9ecf902afbea071f2c57d6b900749599d07c93661ac
395406c43dd888f613b3c95119d47bed60782868bbf3fda56b1634469c7cbb0f
ed48385acac9567df97cd09370cc45ac38fdf5e14aab42f425f08323704675bb
a211aa17f0d1d64200867d783d4e0d4dda4fa692b05e921cfbb667792d729645
3a5a1e9bc5151c30234d8af2217ecbbf3158be366eb295511c121dbd54a990af
4cf83aa42f219de60a51a1bc5cc73fe26458e6da4e2afd3cefc0869bedc475f7
d776eb9beb9f77a4a2ddbf8108928578d2fae94fde6a78afb6d6c3e40bf62fac
54bc3ee85d9e2bf04532f3a84b4472cf820e455167aa7a1b6be55fc167cbf4e3
47ced5bd4cec3a2314909b1b45fa1e830aac45b478fe941344b7304d5b944ea3
a7fa57c26b3fcd3a17880a31b63de47c611937cab7e1065485c531cd0a3568a4
2cccaa13baabb8ce37821b50b53f0d0c7e11b03761b8012beb12cfcc4de7520f
9c6814f518afcd6444bec73c478ef62d03b595f179e4a1816721a1d8ab82cca6
45453e2e3eecd8a9f2e5561e742dcd0a06afd4c9e4187a6314ab8756f20612d3
2cf27f7730805d4da1577e7035c29bed523996d30ac7f663e33df4fd350f2c16
8be6c762745a44c21dc1a87b596674770159f0916ba5149c556d5a580f25df0e
af1f3ed07f7387af919295e59bb23f863b7a6c0e13f61249ad7761c83c2f3654
aa0d43f2ebe1e58226f711b5d2a8db2a68686e6752615aed19fa48359ea3ee7a
d7cb5d6de3152caa201c206f39c11683c17a6b11674a0a857b7a97ef4c3a5fda
1ec39c65317138bfffe210d48603b2a1ae4c41b244db8e3d3c7aaaad923ffd14
4aed284bae3a0a1eb76aea844e0754b9557bbff1c6051a527cd4931cb95d6932
1df9308166456c7eebfd43c6fe23f3ae3e0fca9f52eb6856737552d61e4a2ccb
05e043a6e094dee32804c30a5e9742bb37c0d6c986ce23c05f7163085d3664e7
73a3e7c456845b638e153325462630949cf1b832df03f74de2086e2ee1950db9
12058fb5aa6da0623daaf6d6cac2704b9b6b6446158dcb633901472a458d5265
7f8fe99ae87e082d00fa8b258dab44501dcd3f680490a2c9f358b6b81d1d46a5
db0da626e55113ef463b41e089d9c3eba1ea10c023515c45bb1b4368013c5bb4
fc2d644a6b2059d8bb1696af95512fc7b212343e58b1b50c5c1412608fd0e3bf
74bb675a35c9c5abfed30f9f81002f68128df37a1d7c84f6ec095f19c75b488a
f6ed8d1a085b3f771000c29b98de4ca440d0863e32c42db20cddc7b2e28d21ab
7483e37c88d7f653d0c72cff22adb8ddf4ae690280183f2569da36d108866cc0
e957658cd12bcafc1741e4227cf9b13f08e67a36756707935a387e01d875e821
d9232f939e3afda9fea0f87426d60e4da758d52c88465475011ea33572b3e669
9331360e121640a46a8b2024d025fcf7029c041d32999cd1ac5514060221467a
46394edbded63f05415b8bbbddb421cb78ef0b884bcef3fbbd602006ada4fbf4
434b34f597dc324477d4fdad66fbde81f51be5b6dedb8cd60cf230392c499be9
21d9607584180e95a944b27237a9e41f83640ec5be77fd1c32cc95bc3f10acff
8179fc3c4a07ce45bb54ecb2cbd06a03fe684029c8880ef40e682a53fecbdb2e
3763b4f35bfc737906395bc7bd770893489155870c317d4287dd00ac8f7198a5
f2af3f44be0f3b3bd52f5151b58f444f3b1914ad06aa5724c0e1c29ee41fec30
8500c71d3c635a526a34d1644c76e976e54dbf9226b4d1adfb186a81e2ed5a9d
4e11377b7609b32335e1feaf49db1a591908beab896aad6e1babc20f93d9c0ce
8dda9f53a3cc3b485b4c5d4f03d786cdcc97556915ae878608391da807ec6f7e
0158f3963f43ba0f7c48241bd5e3c47347442803ea7220617fa00daef3a5e0dc
d45e3843db6ef8ee15990030ee9b491a4e4a9e21f2326f2b484f509c61553cb0
cfbe1f7df9addded4874adc550c091b69c5f4042dde8852c5823d80c3e8b1f68
0c90d7e2136bd52a341017a2b802503cb953a6e9d871ab67d9570b2aa074566b
7e771e1b2200a5da9f22edd850f12748ab2d8693f5242bdb9d07a135be55c5eb
fd9782dc5d526f9258247b1460b207cf760a104e53bb6e00fda4c452f4732270
56bf8c23c7d9fe8749a7ebe763c8e24628f83a62dc7ef8cb4cfda68629a9e840
45f79724c7a84f09285dae945ff0ec94e5f5dc9628433f85aa2b3bfad7a6818f
8b771f0591a4a033fd3fb114b5e146fd5307bc9afb7fdd851aa68919c86d61e2
8d5a715dc189ddd94d0e37b364c9b4d01a34e1128442275ccdd77e9ebda6a7d4
1ceaf7fbae5025fa9215ce4bde00f44fea4f1a469eaf889ae3fc36fc841edd5e
33db4012f4162cd72f9072d37111cd432595e089aa74cbe94ab6951bc5631879
448569c342f15388719738ab723d4f7f8987f6844b460c2125fc2a7f526159a7
08adb1d2b8040f2be12dc6aa2b9366b0c9b0d3e988fe00b3958c90d66d2b6517