README.md

Solarmarker Indicators of Compromise (IOC)

These IOCs were released as part of PTI team research. The full report is available here

C&C Servers

Solarmarker C&C servers (hostnames and IPs)
digitalagencylks.com
hosthotelsshtus.com
45.155.204.139
176.113.115.125
167.88.15.115
185.244.213.64
188.241.83.61
216.230.232.134
37.120.237.251
45.135.232.131
45.146.165.221
45.42.201.248
46.102.152.102
146.70.41.157
149.255.35.179

File Hashes

SHA256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