| 2023-12-04 19:25:27 | http://139.59.72.48:8000/Posh_v2_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:26 | http://139.59.72.48:8000/Posh_v2_dropper_x64.c | Offline | | abus3reports |
| 2023-12-04 19:25:26 | http://139.59.72.48:8000/Sharp_v4_dropper_migra... | Offline | | abus3reports |
| 2023-12-04 19:25:26 | http://139.59.72.48:8000/Posh_v4_dropper_x86.c | Offline | | abus3reports |
| 2023-12-04 19:25:26 | http://139.59.72.48:8000/Sharp_v4_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:26 | http://139.59.72.48:8000/Posh_v4_dropper_migrat... | Offline | | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Posh_v2_dropper_migrat... | Offline | | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/PBindSharp_v4_x86_Shel... | Offline | | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/PBind_v4_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Posh_v4_DotNet2JS.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Posh_v4_dropper_migrat... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Sharp_v4_dropper_x86.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Posh_v4_x64_Shellcode.bin | Offline | | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Sharp_v4_dropper_migra... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Posh_v4_dropper_x64.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:25 | http://139.59.72.48:8000/Sharp_v4_dropper_migra... | Offline | | abus3reports |
| 2023-12-04 19:25:24 | http://139.59.72.48:8000/Sharp_v4_DotNet2JS.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:24 | http://139.59.72.48:8000/PBindSharp_v4_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:24 | http://139.59.72.48:8000/PBindSharp_v4_x64_Shel... | Offline | | abus3reports |
| 2023-12-04 19:25:23 | http://139.59.72.48:8000/Posh_v4_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:23 | http://139.59.72.48:8000/Posh_v2_dropper_migrat... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:23 | http://139.59.72.48:8000/PBindSharp_v4_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:23 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:25:22 | http://139.59.72.48:8000/Posh_v4_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:25:22 | http://139.59.72.48:8000/Posh_v2_DotNet2JS.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:22 | http://139.59.72.48:8000/Posh_v2_dropper_x86.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:22 | http://139.59.72.48:8000/PBind_v4_x86_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/Posh_v2_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/Posh_v4_x64_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/Sharp_Posh_Stager.cs | Offline | | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/Posh_v2_x64_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/PBindSharp_v4_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:21 | http://139.59.72.48:8000/Posh_v2_x64_Shellcode.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Sharp_v4_x64_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Posh_v2_DotNet2JS.js | Offline | | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Posh_v4_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Posh_v4_DotNet2JS.js | Offline | | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Sharp_v4_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:20 | http://139.59.72.48:8000/Posh_v2_x86_Shellcode.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:19 | http://139.59.72.48:8000/py_dropper.py | Offline | | abus3reports |
| 2023-12-04 19:25:19 | http://139.59.72.48:8000/PBindSharp_v4_x64_Shel... | Offline | | abus3reports |
| 2023-12-04 19:25:18 | http://139.59.72.48:8000/rg_sct.xml | Offline | | abus3reports |
| 2023-12-04 19:25:18 | http://139.59.72.48:8000/Posh_v2_dropper_x86.c | Offline | | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Posh_v2_dropper_x64.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Posh_v4_dropper_migrat... | Offline | | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/PBind_v4_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Posh_v2_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Posh_v2_dropper_migrat... | Offline | | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Sharp_v4_dropper_x86.c | Offline | | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/PBind_v4_dropper_x86.c | Offline | | abus3reports |
| 2023-12-04 19:25:17 | http://139.59.72.48:8000/Sharp_v4_dropper_x64.c | Offline | | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v2_x64_Shellcode.bin | Offline | | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/PBindSharp_v4_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v2_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_dropper_migrat... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v2_x86_Shellcode.bin | Offline | | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Sharp_v4_dropper_x64.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v2_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v2_dropper_migrat... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_dropper_x86.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/Posh_v4_dropper_x64.c | Offline | | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/PBind_v4_dropper_x86.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:16 | http://139.59.72.48:8000/PBind_v4_x64_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:15 | http://139.59.72.48:8000/Posh_v4_x86_Shellcode.bin | Offline | | abus3reports |
| 2023-12-04 19:25:15 | http://139.59.72.48:8000/Posh_v4_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:15 | http://139.59.72.48:8000/Sharp_v4_dropper_migra... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:15 | http://139.59.72.48:8000/PBind_v4_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:25:14 | http://139.59.72.48:8000/Sharp_v4_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:25:13 | http://139.59.72.48:8000/PBind_v4_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:25:12 | http://139.59.72.48:8000/Posh_v4_x86_Shellcode.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:12 | http://139.59.72.48:8000/PBind_v4_x64_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:11 | http://139.59.72.48:8000/PBindSharp_v4_x64_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:10 | http://139.59.72.48:8000/Sharp_v4_x64_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:09 | http://139.59.72.48:8000/Sharp_v4_DotNet2JS.js | Offline | | abus3reports |
| 2023-12-04 19:25:09 | http://139.59.72.48:8000/Posh_v2_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/PBindSharp_v4_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/Posh_v4_x64_Shellcode.b64 | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/Sharp_v4_x64_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/Sharp_v4_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/Posh_v2_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:25:08 | http://139.59.72.48:8000/PBindSharp_v4_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:25:07 | http://139.59.72.48:8000/PBind_v4_x86_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:07 | http://139.59.72.48:8000/PBind_v4_x64_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:25:06 | http://139.59.72.48:8000/Sharp_Posh_PBind_Stage... | Offline | | abus3reports |
| 2023-12-04 19:25:06 | http://139.59.72.48:8000/PBindSharp_v4_x86_Shel... | Offline | | abus3reports |
| 2023-12-04 19:25:06 | http://139.59.72.48:8000/py_dropper.sh | Offline | | abus3reports |
| 2023-12-04 19:24:11 | http://139.59.72.48:8000/PBindSharp_v4_DotNet2J... | Offline | | abus3reports |
| 2023-12-04 19:23:34 | http://139.59.72.48:8000/fcomm.cs | Offline | | abus3reports |
| 2023-12-04 19:23:17 | http://139.59.72.48:8000/native_dropper | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/PBind_v4_dropper_migra... | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/dropper_cs_ps_pbind_v4... | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/pbind.cs | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/PBind_v4_DotNet2JS.js | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/aes.py | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/PBind_v4_DotNet2JS.b64 | Offline | | abus3reports |
| 2023-12-04 19:23:15 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/FCommSharp_v4_DotNet2J... | Offline | | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/Launcher.hta | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/fcomm_cs.exe | Offline | | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/dropper_cs_ps_v2.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:14 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/FCommSharp_v4_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBind_v4_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBind_v4_dropper_migra... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/FCommSharp_v4_x86_Shel... | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/FCommSharp_v4_x64.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/payload.bat | Offline | | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/PBind_v4_dropper_x64.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:13 | http://139.59.72.48:8000/dropper_jxa.js | Offline | | abus3reports |
| 2023-12-04 19:23:12 | http://139.59.72.48:8000/PBindSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:12 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:12 | http://139.59.72.48:8000/FCommSharp_v4_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:23:12 | http://139.59.72.48:8000/PBind_v4_dropper_x64.c | Offline | | abus3reports |
| 2023-12-04 19:23:12 | http://139.59.72.48:8000/PBind_v4_dropper_migra... | Offline | | abus3reports |
| 2023-12-04 19:23:11 | http://139.59.72.48:8000/PBind_v4_dropper_migra... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:11 | http://139.59.72.48:8000/Sharp_v4_x86.dll | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:11 | http://139.59.72.48:8000/Sharp_v4_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:23:11 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/FCommSharp_v4_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/dropper.cs | Offline | | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/FCommSharp_v4_x64_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/Sharp_v4_x86_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/FCommSharp_v4_x64_Shel... | Offline | | abus3reports |
| 2023-12-04 19:23:10 | http://139.59.72.48:8000/FCommSharp_v4_dropper_... | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:09 | http://139.59.72.48:8000/payload.txt | Offline | | abus3reports |
| 2023-12-04 19:23:09 | http://139.59.72.48:8000/pbind_cs.exe | Offline | | abus3reports |
| 2023-12-04 19:23:09 | http://139.59.72.48:8000/dropper_cs_ps_v4.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:09 | http://139.59.72.48:8000/dropper_cs.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:08 | http://139.59.72.48:8000/macro.txt | Offline | | abus3reports |
| 2023-12-04 19:23:08 | http://139.59.72.48:8000/PBind_v4_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:23:08 | http://139.59.72.48:8000/Sharp_v4_x86_xor.exe | Offline | PoshC2 | abus3reports |
| 2023-12-04 19:23:08 | http://139.59.72.48:8000/DynamicCode.cs | Offline | | abus3reports |
| 2023-12-04 19:23:08 | http://139.59.72.48:8000/PBindSharp_v4_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:23:07 | http://139.59.72.48:8000/FCommSharp_v4_x86_Shel... | Offline | | abus3reports |
| 2023-12-04 19:23:07 | http://139.59.72.48:8000/linux_config.bin | Offline | | abus3reports |
| 2023-12-04 19:23:06 | http://139.59.72.48:8000/FCommSharp_v4_msbuild.xml | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/Sharp_v4_x86_Shellcode... | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/FCommSharp_v4_csc.cs | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/PBind_v4_x86_xor.c | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/FCommSharp_v4_DotNet2J... | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/PBindSharp_v4_DotNet2J... | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/FCommSharp_v4_x64_Shel... | Offline | | abus3reports |
| 2023-12-04 19:23:05 | http://139.59.72.48:8000/FCommSharp_v4_x64_xor.c | Offline | | abus3reports |