4421f214c91a08ac0318871c6f918cfffe36d039SHA-1 hash

Reported by 1 independent source · first reported 1 Jun 2022 by Group-IB · last reported 1 Jun 2022

Last reported 4 years ago

What the reports say

1 report, newest first · the exact sentence from each

“In one case the downloadable file (SHA1- 4421f214c91a08ac0318871c6f918cfffe36d039) was an archive named “Pay and Pension Increase Circular_Finance Division.zip””

Group-IBVendor1 Jun 2022
SideWinder.AntiBot.Script

Indicators reported together

named in the same reports

csd.gov[.]pkin 1 report
a74f9baa1791476c…c8c6fd0822cdin 1 report
hxxp://5.2.79[.]135/!/n/in 1 report
5.2.79[.]135in 1 report
2.56.245[.]21in 1 report
csd.pakgov[.]netin 1 report
hajj.pakgov[.]netin 1 report
pt.pakgov[.]netin 1 report
flix.pakgov[.]netin 1 report
finance.gov[.]pkin 1 report
hxxp://faujifoundation.bitlyy[.]me/offer-55f9918fin 1 report
faujifoundation.bitlyy[.]mein 1 report
hxxps://applicants.fauji.org[.]pk/in 1 report
applicants.fauji.org[.]pkin 1 report
hxxps://www.fauji.org[.]pk/in 1 report
www.fauji.org[.]pkin 1 report
hxxps://finance.pakgov[.]net/salary-a4222e91in 1 report
finance.pakgov[.]netin 1 report
hxxps://www.finance.gov[.]pk/circulars/circular_14042022_2.pdfin 1 report
www.finance.gov[.]pkin 1 report

Copy these 20 indicators · defanged

20 indicators, defanged, one per line

csd.gov[.]pk
a74f9baa1791476c489942dd9e24c8c6fd0822cd
hxxp://5.2.79[.]135/!/n/
5.2.79[.]135
2.56.245[.]21
csd.pakgov[.]net
hajj.pakgov[.]net
pt.pakgov[.]net
flix.pakgov[.]net
finance.gov[.]pk
hxxp://faujifoundation.bitlyy[.]me/offer-55f9918f
faujifoundation.bitlyy[.]me
hxxps://applicants.fauji.org[.]pk/
applicants.fauji.org[.]pk
hxxps://www.fauji.org[.]pk/
www.fauji.org[.]pk
hxxps://finance.pakgov[.]net/salary-a4222e91
finance.pakgov[.]net
hxxps://www.finance.gov[.]pk/circulars/circular_14042022_2.pdf
www.finance.gov[.]pk

Thanks — we review every report.

Report a wrong value