Created
January 30, 2025 18:05
-
-
Save kirk-sayre-work/39419267911ff31039033cba168ee6ee to your computer and use it in GitHub Desktop.
Unknown Brazilian Whatsapp Phish Campaign IOCs 1/30/2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Unknown Brazilian Whatsapp Phish Campaign IOCs | |
| LNK Downloader SHA256: | |
| 0ab3961a8e14d251b7823661154cac27f456f8e3d6eec971caf28fe4d29fa26f | |
| 0bdf5e7f8d4d0e339bbf2948d84f042903bf2eacde9548514aa6b3a96f3f15d8 | |
| 135c26d1a624793438b8ddde0e782b9cc66f7e0dbab83f35607012012958d59d | |
| 156961c606c571d69bc12f66aae85d530ec39663c57967ec052a65f42e8843bb | |
| 1881ebac3d31fe9d1552a57d7797ee554e26b8e1f82a3d5e80b14ca2b8228643 | |
| 1b089c67ecfe70b393e47459076de4201e170106ef0d00f81655db9c13a7fde4 | |
| 1d04c9ae8d7db348e61f75315b76cb4819454406d8fa422699fe56ae5f5ccaa8 | |
| 1fa67f56729b58db869c933c52d61511f01b46c22d701aab0774fdd6e7e478ec | |
| 27b79a720fae25282e6ec2c657a6eeea956978882cd6974ea39286d5eaa9bf7e | |
| 29dc6e571b38d2d66be5ad2085a65d1ac8b33a7883b19d323985f55bfd5cc384 | |
| 2ceb63906886edc9be51f81eab5771018021226e5ae8a7139aebbff70d9a7aea | |
| 3277bb143592f3380fa321ee089f7d0f699438109ad0bb507fe2ab39341f6017 | |
| 35b45cb6d8dac35713fcde62803d960c5d1ea3ddbff328b4198fa09a058445b7 | |
| 37c4a9a2206e7dddb0c03e69dc59af47331bc5786a075dd7ddf3c31301bf137e | |
| 39ae6e5e6b7b1762fa65a417629c79744ca24a5b361aabf23d0a3759dc23851e | |
| 3bb97664be15d61001febb5e06fb64aee1675b7ee1cf6f07e5669268b6a4f7a7 | |
| 3c22411bcf9600b251093c7fb53017ad33f9d4457eacd86e6b971d97e4507c2e | |
| 3fd956d4078f42bbd6e4466d20d8e90463e95b33d960235949c63a017631d173 | |
| 434ca3acdf5257f7142275157ef438b9bfb18802f890b00bbcc9aab5bc574f0e | |
| 46f6e178e634de835d0d91e1a0576ea61e7f07abfa81ada2df77368d3602eaf2 | |
| 4960d7acf4174e2bb3add3067711e1ef47cc85a3af2de9ae37821fb6ca6350ae | |
| 4c94ea01604d62a6399ee9c1ade71bd9b48873efcfe6ccba3177156155876721 | |
| 4d1f03775918709fd29230c5420e22b2b5df9f0824a204d60ec127dd688af96f | |
| 56f6807dacc7bd4fca58e94c900b6e042d06c0b36d8c2928c7047226c1f7719b | |
| 57807ef8d0ecb8e29764b91d70c5261e6b32aacb18558136d324dd3557046683 | |
| 592c53b86152c875e8da94d3e7619b479fbf2914c2d1091588b934ef4ea9349b | |
| 5b81d7839ae65b47e876b2b6ea16110b06ee6bd161da22812aef2f23f79844e5 | |
| 62503183a77d86d0624b595444e4529aa4a6dd4247e0d07af410ce763e3e26c9 | |
| 63d1e96d84fd4cd9fda28e71207596dd40a9c336e891a1ded3ecedd52b3d4750 | |
| 6681d6c930ef983f54be0a4996a2c4d695deec6124ef531f7d205ed803ec3c32 | |
| 687483ebacabc1004c5003f322ee010e4936442c724848646a824e8c1eb2b77d | |
| 6a8cf03f11382a5579a3df610ff2aed2a36ae40716b5b160cda5c101341d2240 | |
| 6af90b66db833d1d823a1afa2c9022ffa0c8cc7486feda2e15905e13d8bc3cd2 | |
| 6c3dce297d3048c5b745a7cef23a2c055ea1034fefc081d5e359d2d328e5d1a1 | |
| 6ca3aea91d025e9bf76320ff228b9b28eb37e387bb7e898cc9edeb961184af6e | |
| 6d40c2997ef6a18b727ea8ad40833ffedb3c3c96ba3424c6d92197f7da4bfb33 | |
| 714ea984eaa8e8c8285189ed44aae804bfd039d8d095028073191061e74f30c4 | |
| 769ed901e7d9dca42954f4f311b8a092d7ce6f14bb111076689197c97f3e149e | |
| 7720bd0abcb72af263c604ddd7e04c06c2636ec71c378d478cdb31e6a991a4e4 | |
| 78ef6f682aed4366d0061205d0fd0fe06b0e3a1b36935cd4622ae61679c800a4 | |
| 7bdef84ca77bbb769e45398dfc6a3fef9d85b7a3ac737c40cf721f542156366b | |
| 7c5a04a80c3e2caa20bca7fce61ad3a6d765b352ed27b18e66c0d161ab22c3ce | |
| 7d0f40dd3bba4e5be5e3188488a4653d69b57e96c216d0e05034ffff01d4f773 | |
| 81c69de63df71699587da85f4d119feeed7a76b043365abf1c2bebba7bbe7441 | |
| 82caf93950ba33baf8c3fb886ad00bdcb6a76f4026e66048826668c97fe64450 | |
| 85a8eca0c35b7314ff25e5f2b173f1f70550f0a37b8ffcd370f253c7085090eb | |
| 87a682b5973a13232ef10150697749aa455b99e132a1f64826cd16f467adc3a5 | |
| 8938a195fec93ad4297e691b4a92aeb04f730ae917d165d38938dee44d332063 | |
| 897417ff57ac5edd1d4bf26de3bd7cfe6f57ec2e257319ccde3444f506b52f56 | |
| 8cd64f96b9ec80afec742c82f5485b70e8c126b0749f515088b3fb225473385b | |
| 91166e769119ddb488da3b73ed2b399367a227a60a7fc5313dbaa87515aa435d | |
| 91b721eb29968106c2f38e2e245a0c0074c3e01799a3dcda0981d6ae2e54ccd5 | |
| 976f4609c79291955c508be2cfa297a4529c8e332823a385220afa68b08a985d | |
| 9af14ba0206c9b671629f87ab59a9bd508c6e4a2e4fa4c0b7897656bf7bac0da | |
| 9f490d37dc7b0c612933081f0027d912d07765b482e554d573e91ffa88178066 | |
| a044824c6ab7ec70746d771d32d41d4f7c74210f65ff4e23052c9d54bf375c71 | |
| a04e57415fdb9a532be0f597ed3f2fb1099ec8bb07da405f61aa1189c17ce4ba | |
| a519fd5f75df63e969cfdbc37ca44aa8edadd2e11bd36550db1d15ab855e3a83 | |
| a644425c4e641f7644c776fe73c1dae8300586bab5d4cad3392b8b2b3be65ce1 | |
| a8a1e90e77c08d5b8f62c5a795bda0dd8cba2a97adea946958feb9c527598060 | |
| ad87f1d703d4024571f00d334a7c9efcbb870d09c2c6d229cdfde0511a25a6a9 | |
| aff9d91e1608a603d470c36ace099511c2b1fbfb836319ea4edbfc8cdb411ee9 | |
| b85f802ecf0ac8b9d7b5c921c3c160e1de41c624171d025e2dc00e2fa6b1c410 | |
| beed5deaf277d69f76ddba50f450052b536b941b4fd64a499c041cda84998c59 | |
| c0b5f85d17cc8bd03492df1d4fd63ca05e693aacc5582db98c3f418dea4d4b39 | |
| c33b5833f15235d712a3907c04694cf3630b7d4fa3e2734255b7f28be21d9f56 | |
| c4624a5ed141155cb0a7fd37cd90d910634a4bcfd894a19897eb174e3b6fc19b | |
| c563ee18dd672e50359ebb1fd17eb4d74ff958433127ee83a44173cb2a13235c | |
| cb684ca017271160f99a4ca27bb1ee6d227a22f5c27670145a16c5f74c560c1f | |
| d0a5b9a1785083198f34af9a98dc9dedc47f15a2bfdf9e080c5b382cd3bf7ea9 | |
| d35e0267cb68e01bee2ceaf2a9008194463e928dae80f8146928525b99400eba | |
| d40932ed59b4df9e41b23a55b74919d6471884c95fcd1450eeec028ecf2d9621 | |
| d8e1ba9ff6127a1202a62ee7de265aed7d89dfbce90a21d1c61e2b4a56cb5116 | |
| dfcb38a595b2e0fe5564733b409a5dd97211352e8492124d12638896a60e0395 | |
| e1fd39442e89277eb2f9e870529cd9728c68920648722cf96d5ed7f84f839bc4 | |
| e2027e4b0bf8d1eadd37fb4e1c64e535aeba1ad778bac9ff8432fe539d1f39ae | |
| e2954c3935b1dffdd97eb141d0ce3efe368ad15b42336d4667c45efe7973d249 | |
| e3f30a497d56c875d487c34b5e36a0aa64554a232f34329750ff25aff8c925a3 | |
| e8e26d7929b6b601c4a43788d09f17bd5c1474a8c45b95e4b7c4a101a123f49e | |
| ed0b40894b7545b78c0c6635851731567ce7bf993a4704ebe8b9fb8e04259eec | |
| edc577fa5a0c0f556ff68412021bdfba92484a305b47624fa75d0388dd96fbb9 | |
| f0bb7f316c06bddd268db576030d2477a66a4f460b97df373993ff4d8e1f47b6 | |
| f29b5014af91c0c76d4d84b2c9862a3fd01cd0cce3c7bd6192f7eb9a8fdab9ec | |
| f8ca5cab708f93e75913ef039fe6619cc99ad0e46562b108dc712af45a9369d0 | |
| f9f4153f8bf78ed921541a04982d76c6fc45cfa743cc2f259d250b94684d6615 | |
| fc39c7c65df5d3768b23bb7a7c1a568eeb6500b43e0098eadbcad5141434a18f | |
| Downloader TLDs: | |
| rosaebrain[.]com | |
| animaliaoqisso[.]com | |
| pinkeosemrabo[.]com | |
| scortma[.]com | |
| Specific Downloader Domains: | |
| aaoqrj[.]rosaebrain[.]com | |
| acbajo[.]animaliaoqisso[.]com | |
| aclenn[.]pinkeosemrabo[.]com | |
| aeqwxl[.]pinkeosemrabo[.]com | |
| afwblj[.]pinkeosemrabo[.]com | |
| bdqeyy[.]animaliaoqisso[.]com | |
| belsmy[.]animaliaoqisso[.]com | |
| cbaoek[.]animaliaoqisso[.]com | |
| cfmfbb[.]rosaebrain[.]com | |
| dbnfyz[.]pinkeosemrabo[.]com | |
| dlhhkr[.]animaliaoqisso[.]com | |
| dquuln[.]rosaebrain[.]com | |
| efrilc[.]pinkeosemrabo[.]com | |
| eosopf[.]pinkeosemrabo[.]com | |
| etogzl[.]animaliaoqisso[.]com | |
| eujbez[.]pinkeosemrabo[.]com | |
| ffgbic[.]pinkeosemrabo[.]com | |
| flaogs[.]pinkeosemrabo[.]com | |
| fottlb[.]pinkeosemrabo[.]com | |
| fvmyur[.]rosaebrain[.]com | |
| gbnbih[.]animaliaoqisso[.]com | |
| gmuvam[.]pinkeosemrabo[.]com | |
| hcivor[.]pinkeosemrabo[.]com | |
| hcwlwa[.]animaliaoqisso[.]com | |
| hhxmfp[.]animaliaoqisso[.]com | |
| hseu[.]scortma[.]com | |
| hshnov[.]pinkeosemrabo[.]com | |
| htkeiy[.]animaliaoqisso[.]com | |
| hwehnf[.]animaliaoqisso[.]com | |
| iphoml[.]pinkeosemrabo[.]com | |
| iqjkfq[.]rosaebrain[.]com | |
| jiscjr[.]animaliaoqisso[.]com | |
| ksaljl[.]pinkeosemrabo[.]com | |
| kwptxv[.]animaliaoqisso[.]com | |
| ldhmgt[.]animaliaoqisso[.]com | |
| lesxah[.]pinkeosemrabo[.]com | |
| mfdlpo[.]rosaebrain[.]com | |
| nbylkz[.]animaliaoqisso[.]com | |
| ndpgla[.]rosaebrain[.]com | |
| nhtuup[.]pinkeosemrabo[.]com | |
| nrfrsl[.]pinkeosemrabo[.]com | |
| ocvnim[.]rosaebrain[.]com | |
| odqjiw[.]animaliaoqisso[.]com | |
| oenpaa[.]animaliaoqisso[.]com | |
| opiwjh[.]animaliaoqisso[.]com | |
| opwaob[.]animaliaoqisso[.]com | |
| oxfago[.]pinkeosemrabo[.]com | |
| pfkmdh[.]animaliaoqisso[.]com | |
| popixw[.]animaliaoqisso[.]com | |
| qfovcz[.]animaliaoqisso[.]com | |
| qjhino[.]rosaebrain[.]com | |
| qnfnvi[.]rosaebrain[.]com | |
| qxpcau[.]animaliaoqisso[.]com | |
| rklyiu[.]rosaebrain[.]com | |
| rwwycv[.]animaliaoqisso[.]com | |
| rxdnjw[.]rosaebrain[.]com | |
| sdqnvd[.]pinkeosemrabo[.]com | |
| sehwgc[.]animaliaoqisso[.]com | |
| sikjnu[.]rosaebrain[.]com | |
| smdcnd[.]animaliaoqisso[.]com | |
| sqhwyy[.]pinkeosemrabo[.]com | |
| teluim[.]pinkeosemrabo[.]com | |
| thhnpi[.]rosaebrain[.]com | |
| tuvdca[.]animaliaoqisso[.]com | |
| ujoqql[.]pinkeosemrabo[.]com | |
| usmobm[.]animaliaoqisso[.]com | |
| vazryc[.]rosaebrain[.]com | |
| vjdazf[.]animaliaoqisso[.]com | |
| vqwvnb[.]animaliaoqisso[.]com | |
| vsgxxr[.]animaliaoqisso[.]com | |
| vtgphb[.]pinkeosemrabo[.]com | |
| wbkhpb[.]animaliaoqisso[.]com | |
| weiiqw[.]rosaebrain[.]com | |
| wgeywc[.]pinkeosemrabo[.]com | |
| wvtlde[.]rosaebrain[.]com | |
| wzmdjt[.]pinkeosemrabo[.]com | |
| xaquaa[.]pinkeosemrabo[.]com | |
| xcqzou[.]rosaebrain[.]com | |
| xddmeu[.]animaliaoqisso[.]com | |
| xizfqi[.]pinkeosemrabo[.]com | |
| xjkaow[.]animaliaoqisso[.]com | |
| xuungt[.]pinkeosemrabo[.]com | |
| yclins[.]animaliaoqisso[.]com | |
| yxqiab[.]animaliaoqisso[.]com | |
| zcjzlv[.]rosaebrain[.]com | |
| PWSH Reflective Loader SHA256: | |
| 143dd99f21b6afae278e315f9e4dd80b232c328dc688f0e33c53869a6deff146 | |
| 1fada5a96068af484fcf3e896153d77ca5786071980b07845137d964da48f4aa | |
| 78e2cf3a217be0ed822313a5d13910162afe3a779e27e69fb735a9e155a8ff8c | |
| 5bd28850b387ef39328f3b8287e215231bcfce220a5bd4ba4eda5289a6d409c7 | |
| 87f078aab96c07c8fe9c4bc8805e7000187226d226dfb491b197cff0aa4692d8 | |
| 38208815a2b47215a8ae844324fdf9b47a8cf248d394914368f447ac001e7931 | |
| c9bc184cfb6b61004bf2edd319820e130e42e3b90b66ee349a3ba5fdab2f4137 | |
| 52f3b20948fe80fda161b55163715618e2ccbe1f85181268975c20c1bfe8ec6f | |
| dd1d6925e015aa59d60b32333718db449f4f3ebf7ab7636ff1367a7e0f8830ef | |
| 4fdbbc07d25ee8a5c044d8d31beca248a5651a63219bb610d43d1dd4eae88aaf | |
| 65c5b2bc0dc8248a20dc77d510e883b7cd5ba0b92706098cac46a174fc1882a4 | |
| 3ccd30b7a948f369a20da3be7059ad73811ae7329a49ca539f08f938e009d897 | |
| 78e2cf3a217be0ed822313a5d13910162afe3a779e27e69fb735a9e155a8ff8c | |
| 6e106d821ae14eba68a41c69bfea9645fde36e9ea38d3c0e00a3b3b1ca5a7236 | |
| 38208815a2b47215a8ae844324fdf9b47a8cf248d394914368f447ac001e7931 | |
| 0fd542be41273b2709ed1b8b4eb7a50d284a20afbd6a4a0a4f50f482a30435d1 | |
| 87f078aab96c07c8fe9c4bc8805e7000187226d226dfb491b197cff0aa4692d8 | |
| 1fada5a96068af484fcf3e896153d77ca5786071980b07845137d964da48f4aa | |
| 5bd28850b387ef39328f3b8287e215231bcfce220a5bd4ba4eda5289a6d409c7 | |
| e4f0dec953500a7f8637b6a2f4a46e6112e0c14a9d2f24cc8e7349010421895a | |
| f32049338d802366864c89ecc0a91587898d0177ab6b619018d1f435f6afc2ec | |
| 143dd99f21b6afae278e315f9e4dd80b232c328dc688f0e33c53869a6deff146 | |
| f047e6d130eaef958afa26d53093e634e265b6082e753679459feb7e188819c7 | |
| 24f1dcd44ea18acde6cc82eb6a83830048d61954a78d498516b8493d815cea9d | |
| Loaded DLL SHA256: | |
| 0276104bfd7348582023fcaef65d2f0d70bd766be532bd659c0b582ffa1a7f89 | |
| 0723c503020d9947c453b0d7313641957ceac60d280274f85c0b901d424638be | |
| 0e5885d43f404ff788490de21875e3bfff4f7885fbbaffa56d76761da90c1a06 | |
| 0e6f04ffdddae444f192436a259a88eb563b02aec46bbc5c2a3c017269b10e9f | |
| 11014c44fdca5ca218730a88f34e0f3e877bedc373076cbb876279371176ce6b | |
| 11569c722ffe9d5e27bfe8afeaefc5e8f01b9da0805c540f2f76b6fecf11dbc8 | |
| 177452c1ad47bad1c755dc12f3927b8febdd7a1b2aa3262ef2b7a3e91ef13a93 | |
| 27fc4e603b750f7ca2578cce7d1b5548130a336b0941c0fe125aad84f534d0c2 | |
| 34232e78f8c419d7ca6dee3ea70e485098ab2c75fca7e4d552d472e43db6c534 | |
| 5b2fecce3d4f345f20b07021ada401065bb21d1ca0c3d84e33b672cc383fcd35 | |
| 797a9506f212ed1f1c0f6912b6e03cc8b746aa0e74cb649a5594d0d59110ca80 | |
| 7c5f693e72bf5b480b3f7e6e33e6a219f9398fcb641c7e105964d2a84b92214b | |
| 7fbb03ef482aa18f78f6ad3248dc3bce7e2bc5ac80e627d2b125f7dd7b60047f | |
| 860b51a0e1fd406307b9732f64a13fb9abf8ffa9d3b8b3f46cdde15385463e8d | |
| 905202cf004a6f194dc3b905d4ed2ec79741f24c2e217f7e9600da7c14b74cc7 | |
| 997c6fe621a43b6430f55b828164ab47d58a5d1c915e3514788206bd0f30465c | |
| a68b496224b04813380575edb26c671105d3b705c8505cccad1fffb58f6a7769 | |
| ad34902b0d499273e30d0b5156baece8c8379a7d8e441204fe34158606dc120e | |
| ae18a145420e5209404e773404d7ab6ebd884caeb91535a41882c1015a8f6889 | |
| b61dcea7e91344ca2b4eb7475bad378647cdc37e1cc91f7e4ab38c785804668e | |
| b9a2583abac2cd7777bfb13313a8221d64d1c60700b6d9cf4084fd4a1df56ae8 | |
| c831e1128b9b981ef41f89f4e03c8a2a2a7c6fc7a53b78f03caad3c672754063 | |
| de457b1e486958458b4223dd2d0329de1b56300f806b4ed43038fc624fa77dd5 | |
| e8f1c2f40a719d3e64e241f8e64870079b793945259250e74ba3d03d880dabf4 | |
| f44227f7a3c90e60b1a5ca63b29b760c196faece10d74359ab587723d1bd4256 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment