2019.01.24.GandCrab_and_Ursnif

2019/2019.01.24.GandCrab_and_Ursnif/GandCrab_Ursnif_dropper_2019_Q1.yar

@@ -0,0 +1,44 @@
+rule macro_GandCrab_Ursnif_dropper_2019_Q1 : TAU Trojan Ecrime Ransomware
+{
+	meta:
+		author = "Carbon Black TAU" //jmyers
+		date = "2019-Jan-14"
+		description = "Designed to catch PowerShell encoded command in Word Shape box as alternative text"
+		link = ""
+		rule_version = 1
+		yara_version = "3.7.0"
+		Confidence = "Prod"
+		Priority = "Medium"
+		TLP = "White"
+		exemplar_hashes = "0a3f915dd071e862046949885043b3ba61100b946cbc0d84ef7c44d77a50f080,cc5a14ff026ee593d7d25f213715b73833e6b9cf71091317121a009d5ad7fc36"
+	strings:
+		$s1 = "powershell.exe -NoP -Exec Bypass -EC " wide
+	condition:
+		all of them and 
+		uint16(0) == 0xCFD0
+}
+
+rule GandCrab_Ursnif_PowerShell_cradle_2019_Q1 : TAU TROJAN Ecrime Ransomware
+{
+		meta:
+		author = "Carbon Black TAU" //jmyers
+		date = "2019-Jan-14"
+		description = "Designed to catch PowerShell cradle from campaign"
+		link = ""
+		rule_version = 1
+		yara_version = "3.7.0"
+		Confidence = "Prod"
+		Priority = "Medium"
+		TLP = "White"
+		exemplar_hashes = "3b59549507e0e3cfb4a363a306bf6eb4d26995066df643e1fc8e4e11eaffa7f9,debe4cb5645f10e6b6383838c25f26781a61acb536d2246cdf8dc33bbc1a2414"
+	strings:
+		$s1 = "If($ENV:PROCESSOR_ARCHITECTURE -contains 'AMD64')"
+		$s2 = "$Env:WINDIR\\SysWOW64\\WindowsPowerShell"
+		$s3 = "new-object net.webclient"
+		$s4 = "downloadstring"
+		$s5 = "Invoke"
+		$s6 = "Sleep"
+	condition:
+		4 of ($s*) and 
+		filesize < 2KB
+}

2019/2019.01.24.GandCrab_and_Ursnif/IOCs_2019_Q1_Ursnif-GandCrab.csv

@@ -0,0 +1,395 @@
+Description,SHA256,MD5
+Word Dropper Variant,cc5a14ff026ee593d7d25f213715b73833e6b9cf71091317121a009d5ad7fc36,7ce3d9fc86396fac9865607594395e94
+Word Dropper Variant,28a8d6b8a0cdcb25d098e403cc8b6dcb855cb591f0b54c2e3363b5c580d92b28,74c7aed44680100e984251ce2cdbdbc6
+Word Dropper Variant,facbc2cb089668197ca3968a3433b6f4826430c13f7d1c75b44667307c67dfe3,10f308d78adda567d4589803ce18cc9b
+Word Dropper Variant,e714a5147335245c386b105bb7494a8b190b6a737ba28f029561efe48105cd11,f279d0f04874327b85221697d99de321
+Word Dropper Variant,56c46ef3d5bd544fa35f6e336d3be93cf36e72d0273fa1dbc915979f2d883e9d,bc1b322e7efc19417ab0d0524ccb9ff2
+Word Dropper Variant,8f6573c58eeecb8cc417a20ee9eb7fabcf55ef4dd96c5220c87806153d016619,3dd17c1ad4731b01cdab9be2af42e254
+Word Dropper Variant,66652210842d53275136893c19ff51978902057d9f67b933132adc95949338c9,da118ab0b2c2c52fd351a28c3a131c48
+Word Dropper Variant,f15bfeadc99aa64b1cb9b643433e60f588244d610c64c74288dc2200f8df6ee7,63bc0a58207c5a6ba48828b02723a644
+Word Dropper Variant,e0792d8fb12be3d9b100a8997b20d00584643ef3330146e4f00759688780b72e,edd5aa6e4c8719634d849c38f83b4696
+Word Dropper Variant,9e4c0405675c0eb632b5c47f1db2b28fe42b68e667c880eaaf56f57976c635fb,e60580f22c925f6cca5ce48278ec0291
+Word Dropper Variant,ce9c72b3348f4f9287dfe6f6a8388c913a503b28129aafdb753cbca27d740c46,97de3aba94557c101b28893e099482b3
+Word Dropper Variant,28ae60da78e097de193c71b1bba5bb4bde75dd9c8c357976c6a44bce1d2d3799,622cf6824c9c5309c3155fbfb4eef36e
+Word Dropper Variant,5172985158410e4888058ce991680f8281489606fbd6eda31e5ca51bd058a69d,3e10524001a0cd27ac142704627a1c08
+Word Dropper Variant,0a178c213499d3b6256546f515b548017eab52b8df72d0933fa18b42e2b99cb3,92fbb355e563d6d2ef946dd177c8d567
+Word Dropper Variant,c8b8c3242aa6a558ee1237ab50861d63372ddcc910721925094d4a2bd908bc12,9188de690a576bbb541f76e696bea820
+Word Dropper Variant,aa2d5568001c555715e7265018b921fed881f1ff1fb5d90ee4409e59971f9c8d,c4d95ebcd3d00a51662e363ec49ce119
+Word Dropper Variant,86b3e9b065f67c0e492ee18dfd4088ea681b071f7c7d19de12759cd01798d1b3,5f3f780be43d5a303abfe7781779c444
+Word Dropper Variant,51efeb613b31aa4523a3cd4e3a1f2dc78deaa8f6259cb69e80307f19825d4b7b,7379c87dc0eafc1765ff029735d957e3
+Word Dropper Variant,9734ee8d9a23f0385ec99fd5f9a91b01916a4a4604fc23103cb376375c893e1b,4d57ad15eecc9a2c329bb85b11b60224
+Word Dropper Variant,a611ccc5c964cbf6a9347c1e8ed3e4fcd5845ab70b61e888144c31a599c507ce,700216fad78de4e57ed98e52003cf083
+Word Dropper Variant,85d9b957f2892a9b2a9e3bff922857fabcd8f7cc0471871af42d0299e5fcd1b4,ebdf5d677cbaa05b607105e590ba1aba
+Word Dropper Variant,83f24fa4456860750147b92013840e612c9e0db4b5cf0676fbe2ab86d928d7e9,90aa8877aa0cbd5e727dec9a6fff5627
+Word Dropper Variant,3070cc1f6a5fa9278b3866e8e964bcce209788ff628ed45f5698f1d684d38af1,ba637214b3ae5c11040aa95a46740491
+Word Dropper Variant,3650ef2e0d48b2bf4d1b22dfccef70870b683d6f68098be1239b9eb43be265e1,432375b35ab19613bd0f45060a10ebe3
+Word Dropper Variant,d9442f97b93e30eda70d26f1e8664bd6ab12360d9daaec64eb975356cb4f3371,d8f5ea3ef5ea1d88ecfe60f6e1f6fe47
+Word Dropper Variant,18cfbae517b4c469014d753e3fe169408f40b70ba6f6ca8ef47106d3ac001577,cd47af72b103d86162962b6c3e9fa69d
+Word Dropper Variant,3e4efa728f170f50d53028e1440ca819c4b27f20c45d87f920c377b8f02ed32b,d5c7a674f331102486ed287526056d5f
+Word Dropper Variant,2d17eecb9591a489a85c473573bd30b61bc7f77eba43ee7da8b9a1289e325180,2213ce1ac4ec1a9c9f29087d22cbd290
+Word Dropper Variant,2ff92874437b2f48b39a426e364b27bf24a6aa519b44f9128e624bd727173cb8,09cb8b46fcaca01c927f0f28984705e2
+Word Dropper Variant,ae147e750d0f4415f1285727301627b71e0e1c11ea048fdd0e7d5e0355f4ece6,2ed2623cd51d227766cb629eeba233ca
+Word Dropper Variant,230c04fac8798b3f48d9ea8f4b1cba2896201887d0f9a1ad4836cf8e8e6027ce,5c3a507e3a29efa550c868c0f203b458
+Word Dropper Variant,fdbdb71a3049161ea5c070922305bb97a437db0b54002a87672f121d4ad8b01d,1d6e8833acfe024219a144ba3de309dd
+Word Dropper Variant,691de01cf755a509eb92aa759634719279b641b7710d0f91a49823a42947583c,af1e1560a2c71b177e5b6adf17fc7724
+Word Dropper Variant,f2fd2beaebaa7f2a6f00c2118ce653fe0f853a6a643ab804f5b8bf7695c9c72b,af499cdf6711ead18fe3b6875a2ea4e3
+Word Dropper Variant,b0595609193e4c200960dcda6e13ccd9f51d34702342f8eb8ab95737ba28c2c0,1a7dd3a41753d1671c1721a72cc5627a
+Word Dropper Variant,0aee74d7daf5918f0d6c46ba8d0f116459a744c09a2eba43755489aa2594af2f,f58c0385f6ecd58c9e7c9dc7341a34a0
+Word Dropper Variant,b1adc3b49f3f75c3d0b7b9ee080dc7ba40872e601e2ad87a3f25f40abfb8c658,fc835c3cd602f8b0c3a522e760790736
+Word Dropper Variant,b20cf39284f185a31f81640c7bdc29fe73385b54f5a5d3cdcbb93b8f949c631c,f321062f000cc69e293a1fbdc33c239e
+Word Dropper Variant,995309d4cdd9bdf79cbd207f6f5056bb9c8ba6e4ae8eab3d337fcecc049fadce,19e7329ab8339ee21e84c7169b50e251
+Word Dropper Variant,00a66bdce043d6d0c8117990999fafe0d5e65f67b08d1d676816248092cf5798,4042a3902750c38442c1a6d3191a9186
+Word Dropper Variant,b8681a43b70dca967e8b82be5dcba7e68f72f00c98f20aa2b4d74fa86f1ed4bd,8b27aba02f36ad4f264be51631c993db
+Word Dropper Variant,27509bb585ef43cd9cb3a7894ade26e4240f187d9c979d21a0025c83fd86edfa,1ace4e1c644384278dbcbaf33784cd50
+Word Dropper Variant,a0141a44c805d9378d94a157a440a2fb9b1f56f1bc49a8dab9ebc53359b6f3d9,8105020f42255345fb4b7f9142f489be
+Word Dropper Variant,3a21802fb70556dba8955d61ce2af7b060aa5f4e89d04996168b402c752be7b0,96a67fc3af567cdc6d114e4e1ba6597f
+Word Dropper Variant,082b148fafe2f1f143c98536139b923be8e1cc3f8f5f25dd4635f51042284417,488b31c51ed544a1630dd5d6a8172abc
+Word Dropper Variant,9790efd4884010129ce18e459e655d07e0a985f0de377c125b2f8f796a15eb4a,026f3f77f5786e1c02eeba8fc7452d28
+Word Dropper Variant,cffbb27f76f67290eb483e62a97098c77d5aa01884dcf33b5a177924df3a96f8,74ead005a8d381f9cdcbb5400d9b4dcb
+Word Dropper Variant,fd09b105f61c52dcf668176a417e3d0b4b1323cb43d7891c296deb41735916d4,d0a999b69e1587bdd8ae4be29520418c
+Word Dropper Variant,52a56e43eea9b680fc9e047b4cd1edaadb51e58868bc2466f8cb60274797844f,66359f2dccfa41698175993a6f6d3d11
+Word Dropper Variant,b65676c32f888e6256932983e89d2bb8694ce6977cd6feacec0879820e010a1d,19f2476b0c3d6644774ded465c2868b2
+Word Dropper Variant,2fe0eac1aaf4b02f8902bad62346e2a50ec5a322f6d7656007011c0df70b011f,0b498f9c6e873264bfd37f2f0e9181a8
+Word Dropper Variant,4d34def9f0d5b3faf09e506c1e59ad5eb9ab2b8f5199bc7a67e6b111e756f2a3,319bde07e82ee77a19f8dfea53f70a6f
+Word Dropper Variant,7ae29c70af5c4e46de3b1218ede8cded4023c1e699a04a137396270ea0ce270e,153d401d9a66f1362a7e1eda7118f912
+Word Dropper Variant,09503fc6344386583bce1385438cb1a5443d3e08dc28d1c2f2c77fce8d75ce78,599692784b457605b7b5c4eb2ce26709
+Word Dropper Variant,8ba53dc3ecdf79f12bb47c986bd4b70dfe2e8ec3842ed632ad6cf228a360d2fa,d550b4311e8f7b4d0ed837262ad2a642
+Word Dropper Variant,d1a9571cfb9e0de046f54aa283a70a55312cae21c7a5bb583485c4dbf4328c90,119ff1a96eb66877a3c2e3f9c8efa0e3
+Word Dropper Variant,77f8c205a29555be6abcdc911674ff2dee4c10306f0c23d0c63e81e9cd1184bd,643c376d2475d04011152cff48b671b6
+Word Dropper Variant,036bc6823b46dbe852bb791d466cb7e232484b676bd73bb83109a8137752cf92,8ca042333d84e1d048fe42c769829aee
+Word Dropper Variant,8666e78ea827f43f1ddd2a64ea7d8daf2c33c33b6b6febc6ec38344f0ce7ae3f,2557ace1cc180189649390dfb638e443
+Word Dropper Variant,6e8b7f45bb771856fe3dbc4669d7c67793ecb88ae90f2b1b08392a6bdda08764,484f6290f55400a2161a64468dea9fd4
+Word Dropper Variant,f60f96341ba5b01852b60a29e8b1f72091ef64a92327e0fabbf9ad74d16328df,12cfd5d1ba73632cece35e6286bae1af
+Word Dropper Variant,fbc4d59566cdeecb853bb6d2303856e6b7d19deee7b37347f1719a29b1c317b4,1bb4bb5d98871db70801ead029f67732
+Word Dropper Variant,c888033d292c67977363217f78fb89fe0ee32765f0c2c7c6e11e8c792c51c678,ad6896f4a10f4fe17a12ca77fad16014
+Word Dropper Variant,44399a077e94059749f000c6dd11feaa7ba1b34d6f63a01b5d70116a790c12ce,01f787c6bc2f6541e68a4b031ecceff5
+Word Dropper Variant,605a0508e07a3dc1f1ecd4430d4da082d9b60e778fa2bc58eac09a3f3782fa54,d11dad8f498252904e4aaf081fcf2707
+Word Dropper Variant,286a167d3e86cec46e49847f1f75c268f1f61b15613ee21c841a2257b52d897a,6066263def75e31c9bcdc8bcd130881b
+Word Dropper Variant,44d3be0c5b637d625a0c8cd4957c271d6a88b4ef4736d8a3d64f6727fcbcca2e,5124ef0b3d48f2f4d96ae49330154d36
+Word Dropper Variant,5c79e8a2df1c18a03730419f83fb04c5906c75166680e31d2e7424882e0b8db9,c8fc05f24ccece16364287f9c88cfd47
+Word Dropper Variant,a4365ea85c2a5435c3659a9070f87549df5bcc241c57d43ebd270d6c45cd1334,755f2cd7418a327053f180961dd5c616
+Word Dropper Variant,526720a4a526870d799dba25e3d3c81d186484a93bedb053ea89b9b6d4af4085,cc0a02817b2912ae7f55976e20e8e409
+Word Dropper Variant,0a3f915dd071e862046949885043b3ba61100b946cbc0d84ef7c44d77a50f080,878e4e8677e68aba918d930f2cc67fbe
+Word Dropper Variant,1800822b3e467eba73278f94f26291942497c31267fe8111bc55e845d17454e2,9b64f1180f3abb79d9b724e6f08c2004
+Word Dropper Variant,309045e56c28d8b4e360c45796f446891846183aafa311151fb0947fa2ab137b,1e457fe7394dbbe50c7b0a76b70e70bb
+Word Dropper Variant,a7cddba1c01e958f659bdf45cff1a8464446c648f1ec9edaab1731d2675c03b9,669ed8f541d6a7847f0502441ec3d25f
+Word Dropper Variant,ffe0b27c6c7ba8c9e3a4d2458b9564e16dc416546a5a26b2611d015552e7e7cd,4f110f01ac65412b851c94be91b71a0f
+Word Dropper Variant,fbb11503c81ccfe94987f67b6a43fc41d22390a79429093da3eeaa500320c84c,071ba100fa1e816a7af9e1dc0dc7c05b
+Word Dropper Variant,0ad69721bd07fe17aefdcf7699070e13adb5bd79daceb75a3ceed830aa029215,470fba3c10bdfb8b85f730ba5a4d34e0
+Word Dropper Variant,bf0a3dd6bae273025173b67f6cb02bcf14f8db61476530c001b7ee24f6552bc0,ff30f349481b40e524022670e2971a0b
+Word Dropper Variant,3afa12190d272dd716d4e98f445871e8553a92cb9ff507daa668876e26570d06,800539fee063c3d9328c68249c0fc70c
+Word Dropper Variant,bfad4c433bbd631d2a13d1eb8069260426e9b8b76eb47207e577b6c4564e5d43,58065818931cfeeb9d3578f18398bf14
+Word Dropper Variant,5d977cf30827477666d25344a0cb0e08edc5a78e2bf459e0dca85a41dbafdb78,210170548f663f50032b530791493e46
+Word Dropper Variant,9ad0dc594b97a29577bb6ca931531949f4e99a3ce3f527a859759fbc18de4706,0e6c73dd934fbb6dc572abc406a992aa
+Word Dropper Variant,82585bc182f173d7c46d93cbf94f19158dda78a23608afacdad7b211a5b431ad,5914ec0e6fc7f46d16a615a4934fb024
+Word Dropper Variant,7d493261c2f53cc64998864e6415140d4f29cb31d2897a8a0697e0e73e7700eb,0ba440e779be9b0a9bec1de172bebb16
+Word Dropper Variant,af321d60b2d3077b79432f50938f5fc6883cee8cb0fb9aaeb77dcddeae8c661a,a5f69846ea42e855fecc8d41b44f7f63
+Word Dropper Variant,40532b5e33aa483c2a847ce1135186b74023cf1121bc3602ad63a544a69aed64,34b14a0196e32129dbba80792bb946e8
+Word Dropper Variant,8ad4b2e6f5998a1277879c6f05655c1c0479341c00a85f76430accdd5f10b3c8,f2cd216dd0760b6c3b21158a61e5f6ce
+Word Dropper Variant,fc91a55a6f64285004007e71073ed2a1f79f5344112d2f292a1ccf42e19b007b,d7e3b3b70207f9f3f8a88d80fae7b4f1
+Word Dropper Variant,7cdb4ba109c4dcb3d2dbb407eefcf790c3bbf7a03bb58b3364aa16b277496910,14dce3ca962771d3d6475b7be868490f
+Word Dropper Variant,eca9b633d0fe17afc94d3a94a75e72123d51c88320eb15bf58aa6b91fd4d0e18,8672fc9e64c687785f2e6f2761b1967e
+Word Dropper Variant,f5bf0f5130ff8e349f3a857079e518404a488d396efa6d89cd57be79ec355924,d96d6d6fe3c9655a1aece509a70efa48
+Word Dropper Variant,9c1387a4e174067e6aba72a067381092963a5d7fffca23ecd3bca4f93adbd36e,1d09528a98b9e0787601abaf799181f3
+Word Dropper Variant,a07cff666494a48667eb3de83f80f906ce3e453afd20d3a563328f941e3fa001,05a88dd7e7c5c6ed1308d7f8566fa656
+Word Dropper Variant,cfa51ab714e38eeddf7ed4c68aeae59b6f7a4a5cb24cefe6eb9d178b3b8746da,ee4eec15df1379a19d7d5f3eb0c03594
+Word Dropper Variant,bbe250d9fef5304070d9148ef7840fa519001c5dc2c2f01b077368eecf8ccec5,5dbb010ced05c57d5dd30ad9067b5699
+Word Dropper Variant,be99e7ecd9c896dd99c3b933c60db7ac7265949a2d002c1760c509fbc372a527,c96ff0e1f549cbc5453f9c9d1b82a91d
+Word Dropper Variant,12dff9d1c2aa0c065e7cca414169d728f80a4ba714b1a841548b8935bb14220b,a6e832f104f9cad9559af651c68a03df
+Word Dropper Variant,a5b7c1a28f2f43328223672c39e586f0dd79a68cdeafd15c26fa70898fb87977,a1d2daee2ef489921739fcbdb65b4f14
+Word Dropper Variant,1cf024eabbe072bfbf95b27e2579be40e9aba458dacbb70b0e6434d5a4ae3765,764172cd3c2328cf521526625c0317df
+Word Dropper Variant,d7a2b983981c8077b1cf87e648136c47c547626b7aa21b7eaff48d6360ff375f,7458e9179e3b778b5603b8aedd97368a
+Word Dropper Variant,efa42b76c35ac574c1b4b9770b5aefef2a6315e235f1e05f8b330d41ab76fcc0,7e2b7620d971ae3adddfb71b20e8c395
+Word Dropper Variant,a06f00bf7c0d200d49f302c3cebb5e0234c224a009efda7b52b927ab90a78e9c,bd50a22165f721e6186c7fbf33a5190c
+Word Dropper Variant,a35966e3fd0e0cb449bce237188130b367df3baffc609e79528d09195708da26,3ffb6447f3dd20cf2e32ee9652a81c13
+Word Dropper Variant,6e7f3560280f50e01bf2de58c06453b0158466d743a07d16d21b0e7c11670207,f14cc724247eaf71b82629abf275487f
+Word Dropper Variant,ba0e0d50e5dba45abee851b5f2aada5d2ab089fcc95ed364cfd6bfe4898f8f07,0490333a5f5eab7bd8ed470390c87dad
+Word Dropper Variant,79d1ebd0d06b08817bb831349b05f77d82cc606b66dfb83e4fc62620aed26c0c,c05eafbf35dcf4ddcc98bbb34df62df7
+Word Dropper Variant,5bc101061c27a166b1df590917e6755c7192c61c17b110b53bb6a789a9769373,bb28de39bba5cb565e2916ab15727438
+Word Dropper Variant,2c5914f349059d9976be45c8379fc79f973b2f37f479b92e09b7f5656ec22ed3,b4ffc2b46b8abfdf04916931716d930b
+Word Dropper Variant,abfc6c0d551fc650b2e685d3f82bbe2506783db4d6864fd570b411e00c852a18,695816c7f288a2a310d5ed15365bd031
+Word Dropper Variant,d7c3e13e7497b0060dddb23e40fbf31f731d8bb07ea60455bbc2329ccca21fe2,86d307b982733edc7432c3a53dfa0ab3
+Word Dropper Variant,9df9b04f0282e2207f284ee85dbebb2d662294ffdf7cf061625ab6714134d6b9,5f6f354a5a0361e9ca19103b6dbdf442
+Word Dropper Variant,0c87500107553c3dc61241a2a6712d89e4c7a38304611e41121db739a70bed84,43bcb142b9f73bb0875abc96105773b6
+Word Dropper Variant,003b2ca34d837139efe4cc6854d7296ed91f3f5188320a427acfe95780c3b23b,573abb96e94dc52e815d3b599fd1cc49
+Word Dropper Variant,77053b29a15e4b3baa26b0d0885967a55bf8ff864cd9f48cabd34f144d595ea6,506838a3bbc24858ac830f0a81c60cf4
+Word Dropper Variant,f00585d1133d8d21a32161b1087d853faf6e8f9302903142fa8700517297d0ce,90ef89ee2803850072b1bbe5590903a3
+Word Dropper Variant,f669ada5789b3b4387bb838ffd6b11af5dc1be5f132de38a979c208fb728eed3,5ec018fd4ac658583b335a53650a9e8e
+Word Dropper Variant,5826b25007e8dca25b04d247172984f98c0a3f4380aadd8d5f8484f3005ad205,b610d7b35559d5ce9087873466b86cab
+Word Dropper Variant,4828a450881b8b5753559559c7f89d1b2ef9257431cc321cba063e21cb7ee1e7,56a76b1660d6286094cbc3140703e1c0
+Word Dropper Variant,27f18297d73463dfc07d65d40b95894bcce966175a823a44f3b3697adffcc9eb,17a1fffc474026942caaecee7d2da31e
+Word Dropper Variant,c15be300e7c45319b70cc019542ab6e968e1c34843ff7ec46b3258c7a2521683,b1858e645e8b4ee7cd4999dc0cf0f7bf
+Word Dropper Variant,382c0e26f75d70337b5db12f68d361f49da7a52abf4a6a905d9714f69e187f09,e30b816d1e5a026f4884dfc936d78e61
+Word Dropper Variant,88383d787c5d9c117362e892114ec4c09a68c41432ba1ee41b0f4685f819cd45,3d6fcf837b87f185df353ee4e88dcb19
+Word Dropper Variant,47cabe69e7fc40004e5dcc3b6f61b7a0c165b6e505f2ba92e147072157af4d9e,8d249fb080030bb98d22002a7ad515dd
+Word Dropper Variant,21f728da2f01dddd30b9a2653ff0e06063a818e4d10f0c0c0842954718322568,4ac48476c45a364933ae90554830cd0a
+Word Dropper Variant,5123f3ab0f233722e18a4e99a356831d187e6f4d2225199fefd83ed1510d1668,1158aeb02601bd0962ae387e7fc6b15a
+Word Dropper Variant,6b7a75e1095a731deebb7681eea7dc2a83ad3848ab28626d5f1a90fd9a0070bc,b5e9ad2842529419729d0386eba4709e
+Word Dropper Variant,0af52255c982b2dd61af36af0953412fa2202989d6a586e7fd7f41abaa466e07,764a70159f837e87a0213ebf4c060888
+Word Dropper Variant,29d6f1c40c1f4226444457a8b20dc65c6d8ce98406fa100560bf578adafc89e7,0396b63e911022fdb4adb02f61739cd7
+Word Dropper Variant,b963598c88889858e7d267297b6aacd932e85e6ccacde968ebaf18818e054f25,d7509b44e03c5098f4a77dd5f11766e9
+Word Dropper Variant,bd492e2cd0f18bf045ae272d00e3043275c5df7745d3441c1680ceba44a9b68a,752dbb7512d8035e11849fa0d7f488b3
+Word Dropper Variant,d496e10f73254ed648e715bdb6bb09d433dd500faf8fb618040e86872931a312,1db7e38d77dcd1497638b2f64978662d
+Word Dropper Variant,f24ba050815dcf19deacdb5bcbef11daf1022766c39e3548dbc5941e8f7810ab,3b314ccdc5da06e45e0b1f8ff71f695a
+Word Dropper Variant,0208c34a80d98149ca58137a9f5653c83630af979fc39bd9b7e536cb02c17ad1,664f409c653ec6ec86b593a18692dcfe
+Word Dropper Variant,48937edec31e15b4eb8f096aab4a0001a603d73f86c282b8c112ff0b8f84b07c,6fa94a25f808e4248fcad4a73f945118
+Word Dropper Variant,c919ca7168a18c56cef00c3a4a0dc6d3719b3d153a4e57cd70f4c01fb5cee298,9515c6123eda4a697f5b2aad26be1e78
+Word Dropper Variant,6ae0f3ee3c4f63450b05a54bad0b6cf0a04d549a91ed9d9da133f68251e9459b,07f37d99c188015a4c6d7aa0188570a7
+Word Dropper Variant,6f93af833230353b9a6229578884c561415c65d7b1d7cca75d08d0a7929d5df8,84c6037a14abd2454a8e70e67a4e8822
+Word Dropper Variant,a4879c5d25e12059f940640aaeb00416de72510f7b1687edf65f51d5d2becee1,3bfdeeed23eb29cf72e7579eee51ac73
+Word Dropper Variant,454c7ff06c91e1f620cebed740882e2df86aa135dd19167eb76c7e3b985633cc,fd87c2d328dea2446d1ac909d3ac430c
+Word Dropper Variant,ae24886089f5398069afb62c38561abb784bd64c0636c27d0220b6ee58d36815,f90a212f920b3bfe60d87542f522b41b
+Word Dropper Variant,c92832de0e6cb89d87734dc668342d192d33c27f05cb6ee62ae05c7981465d0c,5b165dce7edc52676feac4c9a2aa0742
+Word Dropper Variant,f4a29cd7142fca3fea01137ac88ac32b01b0418c992123140454cd157df55769,7a7fb822fae2606b5470b404ab0f45ba
+Word Dropper Variant,271f2e2e9028873579c1138a78cfa59fbe4c1b5bdbc6c61960b1718d4a162420,dfb80657af1719138dc5051ffcb44c89
+Word Dropper Variant,95d87fee253eef4d2bd387b31bdb8622f5860a21bf733494341941413a5cd5f1,7546d06c17293c68a3525a33c39089fe
+Word Dropper Variant,9aba5cf3a30b369c073cb6abea476d54744183b2a3adac9febb928225896ebf1,6b67061d63b7960cdbe8b756243334c6
+Word Dropper Variant,d3e1aac2d41c65a7168fa78e01f2fb5e15ccd9cedb8a085b2d750290dc5f566a,bd13bd9d51ebc2c473ad7c6cbd8c8bca
+Word Dropper Variant,f491b4e0aad11f8a5817c765916a1231181e1285286b0e84180a0b344f21f131,fb56edaf860c280cac1f85ee59b4bcc6
+Word Dropper Variant,7210e5f156edc64c7c58322a51ef2664ab686b7c320b6141b2cc8ea2333ae212,76c91f20e11f679dc0d822116e9b0ada
+Word Dropper Variant,1ea6823ceedcc1ad6fd656b9e251e9614f0844a9220621f398bec4cf50cabcca,da74d7dcf129e6d9e47f9cf3c8a9f620
+Word Dropper Variant,edf73e0590039bfab1cdd8c7fd8c2494b9a5d09af4b853c60bb14214631bc6f4,c0373ce3cf1f3a558ff17a19637e6705
+Word Dropper Variant,4306b6edf5d394e454f1af6d80ee7e169f3e1fe7a4f6448329b935dab95c79fe,b3d900aac27ca165616212d9cce32a74
+Word Dropper Variant,21725d3cd342f58b47e1c1c4882407c5947e93113d988bfe593df750cbbb8093,ad50364f2aa1b657bd382146ebfc8b13
+Word Dropper Variant,667767cef62514ad5ce392dfecaff91cb304beea787efb2dd1ee325ac642d400,4e30ce2a11edabfdcb51e1a7140cc1e2
+Word Dropper Variant,71ee1e65947c77dd18eeb155c8b846314e7126fa34b36012245bcab7b15516c0,59b73807401286d9ef98edcfe850362c
+Word Dropper Variant,536bb05102b988372a3f91af77937a015453c657e690d44b0d6739b8c86cafec,0fde967a5f83e018ca72091a42227f44
+Word Dropper Variant,efe66c37e6b10b989987dcb0355a1e2b563c96ab47b61c81ad307f62ad4057df,e7b372e6ff20c63e072ef0e23899fbad
+Word Dropper Variant,a66e820a3ec7ba671e9a6e527197bca71584cf80b0f1da5513d6dafbbed0f762,11e094ebaf32e4a59835142a90e1a460
+Word Dropper Variant,89d508cd5753c991cfdff9093bf06940156676ae2128ad964486bf041273375f,9c8c8fb229fb25e8ca72771bfddcdd57
+Word Dropper Variant,77fc858e441c40bfe484c6ea1cc8f25da0ae9029d745b137c1f5f14358ff6b71,2f7f55c5503cc9c7eaf579d30e767200
+Word Dropper Variant,3e52194058d46542e41ac0e2077eb7ef4be86562c10213c459fe8b6b01d36e6b,08865f31b94104094dd4a56a6bfee311
+Word Dropper Variant,1ff349e6deff8ffdaac29b027c3a5d2d31fc75cf6bf6084db0d73e630a4cd424,5d0460724fe6d119b37ec974562ae414
+Word Dropper Variant,66ad65fa6ebe292a692dbfd174d3d1fe969cdad80cbf26ef1f27fa56cb567a85,d3318ba8684a393297aa973e5f0e7e69
+Word Dropper Variant,7c1080f38d2b765c477fe2e72a48d550f611b09b8bfe7d3643a9ab4960b273d3,6c3a94de7e6f984047455e5b67bcccc9
+Word Dropper Variant,7b18df3143185debb5ff4e90e78348cd0267e246322e3faa661795a96a7609c6,24c587cb2101f1ca6809e49959dba703
+Word Dropper Variant,92b0373668ad04712e8ea6126f9a870939dee798ef87f06842fd39e3d325a134,f221a16bf16b042d8923de1d41092d86
+Word Dropper Variant,860e1a7d142e2e9c44d471203171b02bb1c4db91101d27da1bdcdcb596b60f33,403c68587bf6f0e22935748992f62256
+Word Dropper Variant,b5ae05eb03b89a50910ec286c54ba5c1cf4f79018ad2864756ab0661e3036669,af86d9ffaac8cfc7e9e8ea998cb773cc
+Word Dropper Variant,9579f7c472c81b41c922539749c4ab0ff621d0320c80c3627ee437d38305e587,af0245274132f4ff921c5d5137aa9bda
+Word Dropper Variant,b2cbbc949cc71058b5322053182dbafe0535120bc287f1012b60d536d81ed4d0,08f80b06f223cf8f73771f9faa7eda2c
+Word Dropper Variant,d9c1b588ac4369446cfa75b532974a459cb5a6c38a76c9ab0a8147758c2ec7f2,6a9abaeaa62043a9812418b19850dbc0
+Word Dropper Variant,3c480ac17ab00a2acd78a5cf4e2af9bab6a99c676660026ee9f051917c99550c,a127eab3f144a2aa5ed64699597bf1c8
+Word Dropper Variant,4405d6be835eb1639464eb9fecf547bae81be5c4639b7b17f18e354eedf34e2f,000c0579d498143ce8e61d082cd00c95
+Word Dropper Variant,ecc628dcb1ae5a5a7dfeea9881bcbf2f5bd493ad61bcdf8aa032ba6c048ed216,ed82e09d7d2b8dccc2161d19e67283f3
+Word Dropper Variant,da20c78b225bd08c9485c8799650424f42a6a3001c56f035b8db869709f66045,94ee0f629e777a06f909db6bb3162e8b
+Word Dropper Variant,7ebc5d6bcfe5cd647efdd8dc3741780d397aed798c958c75c707bc07ca95a5f6,123758ac4e34fae6c4194cebd9d7b348
+Word Dropper Variant,0112c486cda0ac6c01ef1ed1bf8f0062c7ff37dd1b5eff4a060c374377be497f,746cd07350590278da2fac8f77a38c7a
+Word Dropper Variant,e3c6cbd617a7d5210e69ef9292300e6de1f9445ec3a7c2cc42a18cd664427bcc,00134d65ce69000fee95fddde7d58700
+Word Dropper Variant,5bead81f2731dde548f7402232618b06f1d2ac423aacdea20396fa8a15a0c123,b90f2c4dde4a08678cb15ddf25a8c19e
+Word Dropper Variant,dfaafddc80d481df239a64b25db3ca5409b75d0db11e27af2b49471a4c45154d,ad5dc69154f122b457fe985597d6e269
+Word Dropper Variant,685ab9a1688a4da7d65283ade9202a4686e628a303fac5f07fc80ddc1efa7850,f13e179008f54d0635ab3718e279f3db
+Word Dropper Variant,b7eca83a096983dc761d83f94f00b6b5b35c2b865556efc9944cee3c54db2035,7eb3b6308d0061b9ebe3fda190be0497
+Ursnif Variant,446ffd272c79554a19b5f4299327fb74b8ff457681d10571caa6eea51ec406b0,ea7e1650031c92b7377788f05926034e
+Ursnif Variant,42636f3185c9e398958aad272d983c8b8b1409df4ce93f1f8f608e190290f56d,377cd85d8d68fc58976a123aa151c5e0
+Ursnif Variant,24b2141c1134ef14f33a38c58342b6573940c5460d03a2945fafac36e32e6889,b73cbffea8094cfa18b067d9568c53e7
+Ursnif Variant,e53b0a60c238c45019089bdf7f16d5f47b7ba15ca2c918e385c41f0c2076eb52,24fe5a6196e32749cd030ab51824cabe
+Ursnif Variant,4c8de1713f830819e8354b653fd19a5cafd0bc8fa3145eedf555f24261c874de,589734cb60aa515599c687539c520049
+Ursnif Variant,9ea3a726cabb7a8743e4c2f248767d39ae38e6e903202614a098969ad13fabd6,3d706e2c598aef5ab286c38cff0f4771
+Ursnif Variant,255d07a01501adbee32dd3a414ddf624dfbc6a1adaa7fa27e049e22965d71269,be52f42324e68770bb410da715d052bc
+Ursnif Variant,ad7216db1667fa4d4d723f9ebaf863b6a68ebda265b42d8ad4f45bb49ef876b2,d9a0d6957782f72d2800247a00de03c6
+Ursnif Variant,5b59018d2e762b290d46e2a6c42934812a7af6e4b4592eea7e1ebbed3a582d1d,c61bef0c057eb015d1c3a41efabda842
+Ursnif Variant,52d81570332b7a4d437fa8853ea742444a327fc17dd5afa97cd5d5df53604d49,c71d7ae526218ad071dc02dba713e552
+Ursnif Variant,f9583fd88e3ccec6b45c00d5799b5a2aaf1cd374ea8af5edf19561787ddfca2d,6f6e1230da75c6aa5dbb853ae82268fc
+Ursnif Variant,b459b94f3332241a18e242a1b288ba1f7578c7853b2e2d3b941cc6d8daca9553,de2568e68065b4713eea900fe872d17b
+Ursnif Variant,15d8ef1545e7abb85e6ff644490157850039a20415203f8b5115c7398ed92143,93dae1038e36f67928b204595cf240b1
+Ursnif Variant,e0fb9ad32f0306b285b5c274a13c48637dd523a37ede3eb7c9150351a3a76cec,f54b79d9d962845f125dd190ecf1837c
+Ursnif Variant,5993e5aad6e841331c4e595623bd30b6f6c147e014124c29c1f080ec487cca8d,cc84f5a3f922763bf4c215525ba14538
+Ursnif Variant,57053a0aaefaf07652678cf4e5130542ddc76c522d76b4cab9b668bc3cb47c33,3f8cd2c41156501841e79ec8f11b74fc
+Ursnif Variant,b46a9968abe1d12141335d41bc8d573723b551eb48a5e14469e134bc5919f526,e18be3405c66e908a440d82a128e4953
+Ursnif Variant,cf6416e7beffa462753029555abbc2654aba2ee924414c12be769b4c706e7567,db54c2394e54314e6c14c2f7a6b21ca9
+Ursnif Variant,36ce547286ebe2dca45e6c89f7880fb30f7f4e71c2b2b5674f059b48063fcf9d,bb3c8512ea07e90858b807ae971a7813
+Ursnif Variant,eab3e8ad9473d1834beab98946e6ffdc9fa0256620b1e8b118f52a6518fba4f3,7cc8a14cc1ace8d80352e3cbc855488b
+Ursnif Variant,4b5c55c41987b15be6989011854ae7fedcb3aa9008b17b71d7f17ba1eb3be211,3d7a323778ba607cc1c252459d9bce1b
+Ursnif Variant,041a35113b4fe09add33e26cf0c4358d5f6cc43a63032fca4a078e1f433d2f23,014df9e008aa46180f208747f0b9b1ff
+Ursnif Variant,ee491174790ccb31304750bda869cc27c3215df26b7edfbb4a0172236d87b04b,999db8922a4b160ce44a830574e5dd6c
+Ursnif Variant,2b1f966302490f0d71bef16033fac247e2b19345ae2efd053a309ae851a62fb5,06ca6a924873c9769e9ef6fbf6fb3180
+Ursnif Variant,b43f273624b7cbe373cea8466f078896c32bcc81cbba01a302ec0101413b2bd8,ee8ae89c674c09d024f3580a0471d020
+Ursnif Variant,deb2d4eb3080298e30d0e63d22237b7ab4490ef30d44fe3c42b1430690a04b4d,47839d3b6bf006462f0c98a226dde3d3
+Ursnif Variant,61f17746460fee9cc2574e51e119606bb4fb80abfc15e050263ed712d3b8903f,a1fb88c722b371dc08c67b2ff3655364
+Ursnif Variant,4a93010d93f878cc4fa19923bdcc5a3d142d18a425bbbbd2e0c47871e5c7d62e,5133a06a45da41fd2b21503556576953
+Ursnif Variant,d3a599afc2d9d25fcd790c2a5a512bd0a10df5c0523da341b73026e1bfce58e0,079f35f06c35aeabef47c5444903586f
+Ursnif Variant,ec23873186856213da6f41f4b7dfd4fe1f3c539e2c84771f4d95c89e109bd9eb,6d2b6c2e40e5c240307c8ef7ffa0ba74
+Ursnif Variant,10dccb933c67304adbd4aca3d9d04919c7801539c7bd701b8b3940bb02d3cbc9,4d3c30ee38422a4feae6eef3d0d4e1e3
+Ursnif Variant,e4a6b575232cac61b04e12737b0a16c58a7713980f366902fb46ad2b5bff64b2,3bcb53223bd68c4a824084e9f05cedbf
+Ursnif Variant,8b6a8ac696118c7e91da4f57dfa6fea916366a95005f840c9b9a4e2b3e591f42,d8c8145d48bebf04229cad2a6ff5fb69
+Ursnif Variant,b25f08c16f8f936e5d513261e4b767c1ebc3d00aae078eaf1708bcfe4962a276,d0b99583b1e9dbfecc312cfeb3a8ad66
+Ursnif Variant,479c3bd3a3a3d3ffd760c4eb82013e52fddbd969e0ea04c73f2cde4d3c620a64,c7982a65a7e7cd0cf30e7bf617512289
+Ursnif Variant,7f66b1c5f30bd5cdf674d60841abd1c00a445b17c51fd4d02b1209f9b6e31247,a7c9def00b7fe50f705a6e3e4d7d6fa9
+Ursnif Variant,7a6e89ea837aaa9eaf078b57781b6ab367e8cb988d21b32edec1a6314d54ac05,427c29a5950dd2657fca0f30552fcced
+Ursnif Variant,410c22e43f97b8efe946765365db34e3485af80c1b394121da95e0f2bb4302a7,92773569c9d19701472a121aa3a821e6
+Ursnif Variant,325b79f22e1917b513bf90c436a8aa1606f6cb733f73e3c3f9d6c077deef1425,dc1aef855f51db43e6cfa99ff40e9751
+Ursnif Variant,5131f07906cde97cc638d34c8879cfc9298761bd04a80fe94dc33cac86d16011,96d35ab30060422441d4d9e671a9a9a4
+Ursnif Variant,746c01bae1a410c505795f3d579ad7d12179de7d8d4392090fdc22ebb4b7454b,15487c2b24e48404284783e6db041d2c
+Ursnif Variant,86480edcc886188aa29079e71165b2b91feeb9aa16787b324ec7cab650be928b,1a3d11979e7c813e41799887ae1f062a
+Ursnif Variant,69165c9361b537120111371cb77cd2282c48889c5c57f6e5c8cd7948ee9e9f75,f95181b0d52ad2a9033eadfe237dc813
+Ursnif Variant,7d8a91edbbb1f38e78b97a8314076ef6c4061006afce4136e75a6e254b135c7a,e3e974d771438f36ebab2ef8d52f1392
+Ursnif Variant,30d4c0348b0cdff63ba2ddc5b7891bf91da0a3907ac30241eb699fbfdd97e78c,4b6a52253fc9826d222d02d8c9437818
+Ursnif Variant,47f6730bd6546b75cf0e9ed47defc5df68da9d089b8f2acd7723a85cc44f9405,e654337a6e4e50234dd2c8b52a6e1d3d
+Ursnif Variant,7384e608a14203985f9a2392f70cd8822cac1fd2688ee3efd6e4ac55b5c9bf64,759945413713c415c0e344b6833ec67a
+Ursnif Variant,d7ad498b434ad59d2d940cf3ec59237afbc2051a52fe2dffda3e61c739d9b87d,82e5f7380d613158007aad868cab4cba
+Ursnif Variant,2b07b9359a49744393487b7349cbcff88dc018cd32e1bc92241f85682fb7c1c1,b771cf8c946e53605923dcf80b853b23
+Ursnif Variant,154548cebfd6cf327efeb6d17c14a05c000e00d341459b52ed12246f532319fc,58d57a3c5c2c849d34a0f52b233a2932
+Ursnif Variant,c9faa1635ec5577b6f220f892d1e046955717c486f58a364dde98e916cb23548,e84edcbc2b6c11156cb15cc25148e44c
+Ursnif Variant,aa94f950a4ec6529ffe4aac38553168655d4a6fa2b4ee174e0243518c6f15ed5,bbc1f64d4bb3d5606fa0af532badd1e2
+Ursnif Variant,c8aea25f763e308877701a6488e6b0c0d089bd52cfbc351f693246a493a574c2,a1893d46089795d64aa6aa39c2675bd6
+Ursnif Variant,fa00bfbefef6820343b128e4b31d9509813ffba9835871876d7c5f8d18a3a102,75d49e9360161cf260e312885c3b64d8
+Ursnif Variant,24afc24b77671b4426c30c6ef58a77cd533945dfc2749e8e297a81d2b1d95f94,fde1438c67360e44b63b852fab8d4f0c
+Ursnif Variant,d1a1ed682b045fb85e37d051c5ae14ed38b4ccf85116178caf8a4157670aaff1,f3d89116ca79b58087e13ff6b4b2e95e
+Ursnif Variant,7ceb6eade1df9035a327c93af4286bde58496486023123b26161bee65a5e237b,7f7d004fea13fb27fbfdbdde4f044fb1
+Ursnif Variant,6e46ab33869bf745574e871b3f118e4c208ba39e0b4e5912a8704b5bd43d5825,e1fd6b97311705fb47baa37e8c81e293
+Ursnif Variant,fb6d3d338904bc824c91b981c147b3e287b69986ca080c1224bfd3e528533a77,be2926d28957759b1032eabcaf360e5b
+Ursnif Variant,117c9a20a49f6c28ac9c18d8eb4f5e8bb8c8a09e895e8a38549e15b0c38c4769,32ef0ec5980c139ac0480676a39d4d87
+Ursnif Variant,3193db7e33e1570a2776d80457d9fa20a33a30072690cddf9358bf314ce8da4d,6f9247cc73f9a4edb8dcc10c53d19b6b
+Ursnif Variant,4140bf6968c3a39274645130e37bf0cb1b550c08c9ed08990bac32b4ad33f172,0712d81b309b67517138deb0bf3831af
+Ursnif Variant,dd20ea6713196abfe3e0d36679d71d39e5f469b2ecf28a1584f15f20746d9de3,8db4a5c35f1f26d0a2e8776810287122
+Ursnif Variant,0a9a5863863cad2d9a24c01e787278d656f307afdd8bf0e9bbe083e2425e0722,b739bd6c549ddddaaec96497d417d0d9
+Ursnif Variant,d17f98ba86ff96b5dc84e5a4ff800791c2a88d36f3ef8827e8ee089790080968,045cc3743d36bb6f5e804a135db89636
+Ursnif Variant,fc6e3b3f23619d290016e1aec48c18513a6dcffc771eb02ce2be729db86b0fcc,077c157ae98c9adb65ae7679eb745bd7
+Ursnif Variant,918b13d80deed3187481528af2a150796fd4b42fbe41b41aff2f62589f3f5870,1d1ef1809abf83a2dade21aecc12096d
+Ursnif Variant,1d21abefd84cbc607015f06769fc9550337f5d200348ff21fb5be183f90222b3,5f283dce79db2639540dd15560db74a0
+Ursnif Variant,8efa4ef59e81806a5c34fee1ad6d6339feb01011a8748057782255b64df0cf5f,179bb54d751f35bb306940ad4d1851e8
+Ursnif Variant,2593d2f65feead439497173c78a10d57b573269d0ca628c2fc5668d641a04684,644a6c0a511e69be7aaf0a5d4cd728ea
+Ursnif Variant,1d0923f9bf58a357fdadf974b8088203e596ab4baa684de5013aadfc5e906b49,99b52883762d40d37e4b5c8e3107143c
+Ursnif Variant,9ee80117345e20be3a482b3f680569cfd84f07c72958657906eacc0dd42cc611,61f327e117d5635e584d7dbcf25ea72b
+Ursnif Variant,a46bdcf1e4e5244023a54f12c91de56112e6ffc809ae31bf34e95e54a1cea851,49bbfd88b2f25ef066798b090ad9b83f
+Ursnif Variant,0c085fadd8063fcddbf4d9f6be50af69b08b3bde7566f68749f88055c6331a1c,248a1a5803762aa8eefa081aa3f36d3f
+Ursnif Variant,4c860b1af02834256edfa7db1126fb1490e3787c07a93508d174be7b1fe01175,38e246c1dd0f9ba57e0a1e45fe40ca8b
+Ursnif Variant,c85142c57f14a2e45e3f600ceab36e1731a0dc4caed235d63447cb1d48d8a6f5,68d32ad44a94ea9a3f83ed396db6dc82
+Ursnif Variant,67082b36ca9dffcb48423dbf5c9bd41d94ec0156df01a15c6d87d16582ed7462,1e30bd0da647c9e03185b53debe0629b
+Ursnif Variant,ef4794dacfce59b11e0b794892a0ba3606f083d3643df3f29120c61786dd18ea,c7c3e09b78d75efacc2d0c8819041f8f
+Ursnif Variant,f1d52cd34c0df61ffff7039a95cf70434de8162e057ddce98e9568edae1eae62,9080bb674844221333ae5505b7e59fa2
+Ursnif Variant,4bc7fcda3035f4624c92c2f6b9ae1e4576b5f49e4e4475895de929ca436ddf20,ff5af93f9d14b90a41f69d76130b64da
+Ursnif Variant,8fc83960b4e8e25e17080a63dc1793d4db13d178706f9576395e20df5ce1e78d,fa21d8353e2bc1fa4b803643ff52de29
+Ursnif Variant,c8386c0d1ecba6c9edd57338fb2d8219a1d1c1a6ded2d89b26567b452e3a9373,18870c1fa067866d7e4bf4c48d229a0a
+Ursnif Variant,daaf4ed5bfe5c7b618a9db321e6117e1b1597c338ae0e055d070d32dbd608838,44ea0d396dee00ee54e3a631133fe308
+Ursnif Variant,a61b9e265c59407a10fbbf3a0de2f592ee781b6e2419fc0ecfee2aeb1fd4ca24,e6d2ed37e6f541dc9ab177072062618b
+Ursnif Variant,65a3f90a6eeef600695a424e195a4b5076c114481c44641c9ebe56fb7db2ade0,834d5f917b832f77a2320586117e1f57
+Ursnif Variant,9b5992a4468fbf78d54ac91af29a6718da0f36a453a8c8f4dbb62c04425bcf31,b8d189290d5d42ac9168f1071f3ce1ef
+Ursnif Variant,a5bbfb42a1051ba4ccfd73ccd2fef7dbcf15b32c5f12b120fbfb7641c0e46708,af9da4b92b129a87cac4b1b1b1e84731
+Ursnif Variant,7bc2e7b91233c94115d3fb6cfaa3ad29d052ccdce70329ef6051da70b7674139,4a8e584b67bb507f27da7f6cfd52b25d
+Ursnif Variant,73946f631d76d8a59be2648cc71dacc99d7549f0ab44a9c94bfd4fe32cf77f5a,ddcb34b860e9c6074dad98686ecdf19f
+Ursnif Variant,cf24f90f234002a190b14d2741b8de583076bc3502245f694c1ddd4efd4cbeac,78bce5e01f091b007ded098857a442e7
+Ursnif Variant,eaeefb654a6ea0087cbac9574f61a7bb55f29f96d99d2c623044b8da5478f502,dd2442f7d4258f7ce197a39f9140b454
+Ursnif Variant,7b13d0149faf344e928cce62f24e90aed4913db98d25a6a96e4f802e0bf4e450,e88db30f7197c5a6d3345b14519c6e27
+Ursnif Variant,2f50cd8d3256c041ee1b803b9e229f81004835fb9b1b25787346ccdefc62b153,24dc9e452af9e6ca8190589fde183245
+Ursnif Variant,a30573011030c4e9f12ae4be142c4ab70d268fc132346c24a947d8ca698fae2d,5035ef65dcaa914c0aa8a6130c19887e
+Ursnif Variant,98bafb19352075bb13bee3a2f4824868feb5b4db0776c3a7497013f5f6ea7dcf,f139d395970d41860866dd675230b99f
+Ursnif Variant,7846d33f6ec352546235818871ecaf5ba70811d4ebfda4d4fbbb7b5305a67a36,3edf99a377ff6319b7a94a42ef2c9f6e
+Ursnif Variant,cf07efb532838e6877e88c40f4e69d7f77800248e91af8a553663ca0bd3ae7ef,706c33055fa45c303f62ca3c6241884d
+Ursnif Variant,05e6c944a139a37a1a7abb5da5af5ddbb378a0949c3b9fbb1498d286623ef85a,339f444d0fe1f01dbaf99503d43f173c
+Ursnif Variant,395ff5e5a0f149dd3eaf05f1330df70f4dfac14c60386642f25593292f109847,947bfabcd8bef6052527ae2e43a1ce7a
+Ursnif Variant,08db0d760bcb1ca22f24dde4b06ae8978c832b47e5c86f3e903219278f519933,da77271c8ad1ba830a8f2ef7e42f0b39
+Ursnif Variant,21b1a6464178a651a748857f088473ae3154a83cf63540261ce84eb7fbf2a234,b1c1880853f4375e961a9f0a87f84ad0
+Ursnif Variant,ab6af6765fb5c39f7823992f823c06ac725a2a540ce0122a58809d97731f4462,6f7d5f5e4d486aaf9c8a3e4ef1877f84
+Ursnif Variant,f466a75cb24e2c27c5bf7ef46f1cbc27bfd5d2f3a5055a0c41470b5495c9d74f,5d9701bd410efae8a60bb997cd88face
+Ursnif Variant,61e668f79ade08a08124508c860099c842f5f70ce6a7151a3df17e7b613135b3,21cc1664594168b7dcb28bf577c80c51
+Ursnif Variant,7bc84737bab1f85a443ff4b77650b1722d1906022556876c609aa943d983e526,5ef5d811ea81294f4d5d8de48966b8e2
+Ursnif Variant,97b69baede9bb0d3bc0bd5a21dd8a5eecd8448d0e2eb509a69ac2daf0a278f85,19fd84bb01fbc1296f679f2b264d5d3d
+Ursnif Variant,e963f86daba6d6f59946e0935da060eb2053d2fb26df619b4f8c966e3c25c934,3f796159c363daa8d2e7c68f29455d52
+Ursnif Variant,2887117b19363d209f9d47ee5b3b9d33a9357d7584dabd1e0cef3a33b43500f2,aa6e0b4909e3252ec461bded9cbe7458
+Ursnif Variant,303b59e0ce995e52d11c7243d8c6082f878436825b119adf47441b9adcd23b35,ed49473dada4c419a6a580a5caa74481
+Ursnif Variant,ee0f27a72967e8689b46f72bfe3295c63f036a27d3bcc6b3e07602340c70b3a9,10993b294e9b079249a698a548a04f09
+Ursnif Variant,2df02d68b0f08cab1f6c5855b34599a610a51bd1f9d1df746aa72ac461d551b8,298ed967c6fb0b8641d3ba0ff634f9ee
+Ursnif Variant,f43aae4c32e36056c507374396380f975a84fcb216d9eee92330af65db4741f7,68edf9c58c1877fbc033b5151d02acea
+Ursnif Variant,d64ee497aee7a9bb569130b1602d9485cae425eee3c5bcfd015d8f4034ed1452,7ee8300d5808b7af0681f8d397a531ba
+Ursnif Variant,c190aaf1e91952bd85e280c91827920205e3a9ca54d74ee5c0295f0a7ffb11b2,59a2937c2aa85cb2186a1932a03a8dcf
+Ursnif Variant,a7dbeb1f4d48b2229bf2ad62213bc452df3919b4da403f85c9642cd0c16a7835,7edcfabfd678ab0c2759256649cb48f6
+Ursnif Variant,90a57383b34251c2020e53eaa9eaad4d7bf37d7f62a3162657919027b6d12a07,12d85d1f7da37561dbc6ad3c8b8e5a8e
+Ursnif Variant,1aec7136dc18c9dcf4c5feebba60484ee2dc6f44eacbe5d1f67c6cff248b558e,88fb17126cd78a52b101a870282bb536
+Ursnif Variant,287a10fc8cd08f3ee721cef7977127a13c5dd93f2c6051f227c4731500c1b442,eb1512ea00e5930ce8ce37dacdd85c81
+Ursnif Variant,a348275b844432ec598d76496c8fccd6a9aa488be707709a64bdf3d3b8acb231,99eeb35a52ad7823a7f44a2d5ef70b02
+Ursnif Variant,0d31e3776e9a3b33ecec4f3eb1ebab1613dd5669e978f1db6d0430dc935a9f9e,a574aa0ad92a6d5c3242dbc72dc13b33
+Ursnif Variant,db2c753948ffb71db865e84408435f9480fb9c631c9234be22c96a89db2c2c6b,f8137611e3d0e55c5c97a571d04e2d96
+Ursnif Variant,e46a970bba107b5ba586db2eb133e2967cfc3e92f759042459d92eaea5de4e05,a13a1b8352a4b93c41418b865ba02abd
+Ursnif Variant,2730daa49dbc70069432dfb5c21d993860e13778be3922d10fec9b19f2d641b6,db38b842febe174018551b4bd8e77f4f
+Ursnif Variant,c064f6f047a4e39014a29c8c95526c3fe90d7bcea5ef0b8f21ea306c27713d1f,404d25e3a18bda19a238f77270837198
+GandCrab Variant,d6c53d9341dda1252ada3861898840be4d669abae2b983ab9bf5259b84de7525,ce1ee671fe5246a9c40b624ef97e4de1
+GandCrab Variant,aca0b96126c813b0d29d6fbff9175f8ca62ff2ec6eed83bff76a73ae717cfcb8,07f955796a252771861c8e0db06b1f01
+GandCrab Variant,8cd45f8c8f2ed0109db6a64f9945f3dcb8a780f65c76aedded7b8af95e6dc7ec,4fcd0d13ea669a83a749ae5bfb098ca2
+GandCrab Variant,933210a9d19b25e0711ae88eece1ba06bb035a01ab2880cc707ff55bdd3b8dd0,8ec87fd3ea777fa8d5160dc957e6683e
+GandCrab Variant,e564e87958b3e76bc9bfeb5bed773b7a17f3a82f84872acdbb609aa43a9cd776,c7d5077960882259b85c01fd41c49ffd
+GandCrab Variant,8ee4dbbdcfbbe13669f0484b168d5d9fa7b3db7732b567c9ae507f3bdd39afd3,9916e107b3d501c60d4baaf1b8f8a77a
+GandCrab Variant,2fce4ed2d23e687482f1fd165932dd3b292173d4e4f5991bc9329384699fb00f,24a1ac0b0cd98114910888fe63f7e502
+GandCrab Variant,0a9b334682b8ffeafef0fa230f0821bf8e0e0193212de7e6c2c1e528008c237f,920e473f3a483937a27ab65c0e170a38
+GandCrab Variant,b24ec3bc9de1faa5a55c54835c2673e244e7b42e291f70cbdc2c23672abc7067,647ce0159d62ba5e42a1a1ee52c83ee6
+GandCrab Variant,c5fe4b5d1803a096c1a4330512406595bb585846b4a691459de1a65b6b390409,5f0cadac003b971e92b2626dc8234524
+GandCrab Variant,ca1381e1e5a506e5fc69278c6989249c5571dc59df872af69bdd4720a3219e93,600da7a702e37934c7bef9f285f9b532
+GandCrab Variant,0b28b28ab38a34c86501ac7eac77464ac77ce36f0cbde16b818dc8723032cd6b,ae8c315a447c91012139b82dd92224a1
+GandCrab Variant,9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a,8f78176a1aa30d302cd2997a32cfdc79
+GandCrab Variant,c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff,2e99d80a8b6534a2604d5ea918a3879e
+GandCrab Variant,04012bef09ae476e8505bf140a0d49a97c38e54f082ebcd0b9eabba6e4ef8deb,7b29dfcc04993f4fa6445fc4f56fb7fd
+GandCrab Variant,dbb88de4201933bdb099b21f91786be636b6e4486765f023abd3319300ed0006,5bc5696a899074cb3623aa640602c8ad
+GandCrab Variant,c5aef7cf92dfe4d5be086d9dd75f960e54024499ca86d768460ddcdefe59b751,ad5a2dde47b4ab1ed1cc90fb0b039869
+GandCrab Variant,c7f2cb7fb3ce23e7144c1ff6bffa3dc013d706be2d78ed7da3c07064c71aa08c,4243cfc0166904e87b754593aeeb1fae
+GandCrab Variant,67db8a1398d4a54f1d1e4ee4e3f729e3f48b1d60380e478d61656fa2ad119df2,f0b616050bbab2b65110379cd4b448af
+GandCrab Variant,7da877e695e8793bc185b134468fe8f391bbc13d34b382c6f1bbd24dcd8c34fe,4edc189469b0199764ad02890ec52791
+GandCrab Variant,de26d1c03bdcbc3059de02cda9a24e75dea077a40c51d5ef7e908dca33818883,56ae8a18070ee4334d4163338ecb7cb8
+GandCrab Variant,ffe577ed01255bf462c0257a2333e6a0c1cf3472c92171885fdad45ae958e56d,0f270db9ab9361e20058b8c6129bf30e
+GandCrab Variant,7cbc7453ac42556c52a88011cca5e634d86a3f5398e44c8d33b3c08f0ffde633,1ef3f352d97ba827f446f6e8708aa054
+GandCrab Variant,eb630954eca8187618ea8c81a6bc260ef45af95ae0e52306e7e9a14ce51885f1,7d7679944649c0eb39feb62dca1390ae
+GandCrab Variant,e5c522e14a66c7ee82d5e68db74f8b44d1a8e43e4a674b17a8405b21a9845bb4,0b33e34e26c6e53c346517edd3dd9841
+GandCrab Variant,ca63965941add686c00e72a57c4af9c1d1861ecfe36639190efb56810d3cee57,c397591f6b7678fa7c260cad23f97fbc
+GandCrab Variant,5a58e0bb60630fcb25ac0c57df0558eca7376376ccb93513b1aa6e1119f49b26,80604b65968dcb6b013d182203e016ae
+GandCrab Variant,9d6ca2955d070b2b32fe4b034c8f622f44ba9c2c5b703312b010ec469432a984,e8cda086a480f56b8de88d1d83cd4df4
+GandCrab Variant,4b5fe7497864d07f78af15fa3e1aa3702b303b89f9644624871d83dd0f484749,a3af0700aa029bce5684ccfd5531bcf3
+GandCrab Variant,43911f3a36ede4a5c71a82c27a49e68cab0d0a309d934fab07d9655b30978de5,50c0c967b590235bb84fadd52e17d906
+GandCrab Variant,007988b1ffdce1e161071f92a130b64650735a5eed6445806c2c967d0902c286,f2e83452c8af69d031ab5b4f6442f802
+GandCrab Variant,da8c0a6ac025e95d408e72e2656d4cad02d4a3b4027ecef9d97c1a12311f37b4,be106f7d6f2f29724cfb0272c4f024f6
+GandCrab Variant,02df57cb16dd7c4b42e45fcc77638e460001f8cc53b7436d4e2f978f528b8e0b,aedb746cd1ba05b21f7e8141cfd95cc6
+GandCrab Variant,658b2e2ff815267582ca2e09c1ecd1ce18d10757e196999ae1a471221645ae6f,baf770d79dd3a31238feb77922dee9f3
+GandCrab Variant,e42fbcc86cd6efa1594057d920aedc6deaeb02aa03df675a9c11434a436c464f,a847df6b845406d596e0b503cab9eb6e
+GandCrab Variant,4c09f544d3d0775933d2e0be26e1d308dc302b231b01dd1ad1da95b460c24bc3,2ee84dfc015d82a3145ba51d1b3b3a73
+GandCrab Variant,b13d138b8e2d9c9aefc787e6cf7bafc61826e1259ee8f512dbae58eb86db7b97,96f38dc9816140fc3f63e540e9d9292e
+GandCrab Variant,e40f4ece3574f58a121d4d69162c036d4f903354f77836e8ebd570db01defc87,8e0ecc245f56f77e720c54f765cfa396
+GandCrab Variant,4be2d7cc2d715d7e5b87eb21f0c984f4da961d63aec448c790800fc1f76f2b98,1de7f6df1f5cd88c36d79c2f0ce0e6b2
+GandCrab Variant,3e4d1839a2882f831e04ea51082df3e4422c2b1d12daa5a8a8de7b48b5419c47,f81080a77a7cedfb99c5bd3db78547c4
+GandCrab Variant,60d2a00005ccfeb478a073ac485a66ebdf8498284f7bc59213251f77932f7306,ad32c2d46b2b74d93f86c130b7d5f6dd
+GandCrab Variant,da7acec9380c8479d1131fdcec33107ecfac90c51e6fab9cb1a2e24b3098a606,946f912837d7aeff36fc683c7de5e03a
+GandCrab Variant,b2936d7135282236bbafd816a31892ca254d768ac69fda4d25f1ce69d4948919,e66baf5880f9749f87acc02e35a0bf33
+GandCrab Variant,eecbd23ceccd6e5e6b135419fd435a2b10cc12cc0b386a5a4ff2f5dfe28fd5f3,2ceb96bdf1dbbb3618311a94bae124a3
+GandCrab Variant,97d8351aac1137187f38deeb4b3f7743c414600681126410501ace48aabfe532,a1769e3e38249ea6f218f628cb551010
+GandCrab Variant,50ab1dadecf027533a17ccd2f4c9fb571432285567c914fd81540b8fbd9203bc,43dfb6a59130c5b3dfc417b10d347498
+GandCrab Variant,5cbc42e68adfd11c7054674a027eae6594bf8f116568d1718976d3465e7675bd,f20a815b1feb9d3df8ce512d40e39fac
+GandCrab Variant,f2a712b804c838abf68be44c14d58aab4aa7873c8812fd1f2a9cf0fb112bfc79,46cc8350def065ec86934edea49de860
+GandCrab Variant,a9254c4357e684756f5556ab0ba0182e5fb41401080f83af927abd432d8bccf1,25d2cf33413d13f1c36d071d0e33d4d0
+GandCrab Variant,fe20054bc1bfe3feee965833b8af2f35acdd2d9a9f28a0ecf307494ac6e1b664,24275604649ac0abafe99b981b914fbc
+GandCrab Variant,fe56fa9266ddd1f9a864eabac6174815fd5315e6978067a4592b8949ea321270,d044106fa47f15198f8e26eb64f7394c
+GandCrab Variant,de4e50fa18bae7964ea77d1e015265e4c2232e5bc7d97d28e420c942ce65d6c0,d968a6bab562d04e73a773dece109f80
+GandCrab Variant,92aadeb4fb086bc672e28de288ab684990d4efbd43cdd94380037e4990a14b3f,21bfa1dc51db0926cf4a4cea27da1504
+GandCrab Variant,4bc87443c8b2440dbec1a1c5079b78f92e7758df236520787062a9a760c98459,49c2431b9b7f32118a491728059e32cc
+GandCrab Variant,add67e3a4531d237e3c2b581c4f3eab46209a611ee73fd16758c5fb2cbb842bb,b990954d3cfadfd99969deacacdb00e7
+GandCrab Variant,435a6b2421306dc072505c728ac7ce8afe99e0285b14730055942eec6081c5ab,a9dbdfa4af98af0b90a995a1ee451b64
+GandCrab Variant,e81dadfcfc8a9b12b992f216b3ed3c04bd404e77e5b690d601a27c71a7a2967d,1514dfdf8645fb2bfe1b76282d0b9c2d
+GandCrab Variant,79c6969732ac6151aae2e67867a1feff9e6740f9db08ce07187367379b0f5179,18540ea0b6f7e0633c3907fe90310165
+GandCrab Variant,23e59d431f392d39e141291938bbc8afcfcc15d821db85bd4facc8b8249e4717,e90fb0702733d4ee716bcd4acef9fd07
+GandCrab Variant,6810a249c8905564bc4b143d87ed539e922545a9bb7126ce9159ebcde9695aaf,31b0542612ddefde00c650fe828ccd35
+GandCrab Variant,32ed7f3e60bb4b8d927ec548d3c95d9d6327f5b376e77165b3867f29f9ba4558,20bdad92eb281bdee8436d835c401b4b
+GandCrab Variant,72311ef28d4b489360c8db938dc45650f95733a8ed316f53a759b3928e8e73e9,9cea364f372f26852544a46a0f3a7461
+GandCrab Variant,45d7d7b1bcad2b5d70f67b8ef7e006df8d03eb0d5e8af12a7aed5a68f1c34a07,90f14f16e79d6e83fc296eb50db87059
+GandCrab Variant,53b58eebbfc0d6db0898132d72f191368a78a8e34140f0e74a2c179f3cd07664,73f0eed8c39217c35f56386f52b29980
+GandCrab Variant,6c3d5ab1ecfc9aaedd1722893d88af445029a19d3a0c67050bbc89da9240c31f,7827adb7d47dd3d8af3fc9e545a53fca
+GandCrab Variant,d2f237743c9bf65873afa65a45f02c01fd91315e6d7406fec02dc50c3255ab9b,f2a2bcd748c011c0ea1d7d64af5e4452
+GandCrab Variant,736ea4918754271584615622fca280fb272f613f83bdb2b867fe1131482b4c3d,cb067aa3f71d1d59c9b91fe8b4632c4c
+GandCrab Variant,94e829c84786c6a10a7552d591a08b577921d6d6b8942a48cac2a3cbdfef8107,620020e45bf08e6d9fba923386339395
+GandCrab Variant,e3c1d82108339e1e923bf13986593391b732f4b0dbfadb3612eed6a40123229f,faa0f43f8c37845072966090a5eccf2f
+GandCrab Variant,366fa0bc8cd1ca93ae22e25734ab854a1188ad171c2b8bed0b8e910385f44911,c0a972bfbb576c4cd296bae03890b2a1
+GandCrab Variant,1b49a23f6ce95e63d52e263d60ab9da05ad6a423b5aea69360479a0965889014,96258da069bd066a234cdf33289fbd87
+GandCrab Variant,8ee40eb0e93a94fbac47c990a0944b4d40e408bfe77a447fcc18c50dcb430347,485162da155381fedb5783f645b1fba6
+GandCrab Variant,4aab275b3318ccc3432c065561a1911c7f7b9d3b5d7aa7ec1d8e5bffa6c7409f,211e4a365c02101b1f72e515f97bd5ee
+GandCrab Variant,e954f7f030aaa08ffa2fb7038614e59be392680fdaa0d0ce63ef5195d5d42b16,04f2a82387c8e503f655921da892cf9c
+GandCrab Variant,db2884a9012cf6e8ea5b3fabb0d02a9487eb412e75085b37188d5e8f4ada7ca9,fabb492a76f35b91be519c239621b2f2
+GandCrab Variant,6d291c12fdb7ded66cb67088bb2fc84a28b2f36f22a599cb9a03b41b02fe0540,d40a530582e67ed1e8f7fa46cd4049d6
+GandCrab Variant,d1a9e47c59b13160bf062ac7d2b2552655e0aef751c1d92258f591114e1a48bf,f05a16da38363817036b4bc4acd0e491
+GandCrab Variant,edd381859129f4e84666944ca9373fb5da4fa0da7c25445bb302bad2d9c1db62,69996b52ec0785a47c09fc8c8127c63c
+GandCrab Variant,012b97bac3f23e63bcf1399f49d559ecf7523bd9a8693f1c483f1f1db79b8c63,f7634cc3f920fedfa67a33e078335c32
+GandCrab Variant,0d8a1610fbe90831d4aae127563c8b6d0f0fe85aae3cd7062013f74cf38be4f0,e54a9f893a9359ebea71d892990b67bf
+GandCrab Variant,403857de4d8406fb162dd53e1bb5744a468b47d138a9555f836bebb3c728dd99,12f7743a2b1cc9ce59b16073d918dd86
+Cradle Variants,3b59549507e0e3cfb4a363a306bf6eb4d26995066df643e1fc8e4e11eaffa7f9,c56ca5197663dbb387a728fe0b05c92d
+Cradle Variants,debe4cb5645f10e6b6383838c25f26781a61acb536d2246cdf8dc33bbc1a2414,60c64e1d10223257c4595eff4b7a623e
+Cradle Variants,a611528272b535dc4d6a0da1d82f45dcf03044cf719bd0faa9c38380200e0256,47bffeef29c85eb715f5b82fb6262db5
+Cradle Variants,d5340fec2aa3a89fd1c59c4e0fc1ac6d555cee377d7815f9dff8e17c3b9409e8,f41dcc4aceaf41ef1aad6eb4157e79de
+Cradle Variants,6eef1f43012358b7585a243d79a070b716a13d77dd51ad89d903539283519721,467fc7fdc8c90999658297a18087d657
+Cradle Variants,234ae126405324aae9d60bd011dc4ba0c462eb2e8f5608386f0d4b03a0b3e6b0,4c8ffc0e6c7fc4ba4f9cd5c12fae12e0
+Cradle Variants,df4b3c1e20e0edd4c9cae6746e15651421cd53ecb386ba363712fa4d14ec4af1,1c7853dcde09811af7f3160eb8dfd705
+Cradle Variants,22ab5ea685e0702b7d6d51cc882f42fb53c993c107004bc1f5ddc71cfa8cc2af,f1774a481ef7852935aa00907359a2cf

README.md

@@ -19,6 +19,7 @@ Please fire issue to me if any lost APT/Malware events/campaigns.
 * [sapphirex00 - Threat-Hunting](https://github.com/sapphirex00/Threat-Hunting)
 
 ## 2019
+* Jan 24 - [[Carbon Black] GandCrab and Ursnif Campaign](https://www.carbonblack.com/2019/01/24/carbon-black-tau-threatsight-analysis-gandcrab-and-ursnif-campaign/) | [Local](../../blob/master/2019/2019.01.24.GandCrab_and_Ursnif)
 * Jan 17 - [[Palo Alto Network] Malware Used by “Rocke” Group Evolves to Evade Detection by Cloud Security Products](https://unit42.paloaltonetworks.com/malware-used-by-rocke-group-evolves-to-evade-detection-by-cloud-security-products/) | [Local](../../blob/master/2019/2019.01.17.Rocke_Group)
 * Jan 16 - [[360] Latest Target Attack of DarkHydruns Group Against Middle East](https://ti.360.net/blog/articles/latest-target-attack-of-darkhydruns-group-against-middle-east-en/) | [Local](../../blob/master/2019/2019.01.16.DarkHydruns)