Rare Wolf готовится к охоте 

IoCs

Domains:

vniir.space 
vniir.nl
office-email.ru
center-mail.ru
downdown.ru
redaction-voenmeh.info
mail-cheker.nl

IP:

45.83.192.163 
92.63.173.61
185.125.51.5
107.180.112.239
92.63.173.62

Исх_ЦИКЛ_Постановка_ЭКБ_РИД_Испытания.pdf.exe
MD5: afda09d9ced2ef27c5281d5136039c6b
SHA1: 33e53b833df09ddad64c239730db09669bcd2742
SHA256: 71d16168eabba0232afb45c6400e2d9578b7ccddb5f3da6a87ae0cbc8e25c03a

ssh.ps1 
MD5: 4a59b56bdff32bf8d4d1b03f6d3f69a4
SHA1: d6b3ae11d1538f281e24544b4e42220962d93fee
SHA256: a57ce523b8ca5b90e2b4d8e64418218c2e82c00d42c5b362f7ea4bb9e8a84e5c

ps.ps1 
MD5: 1b815e84ffbe780b98f39b0afe59f3a8
SHA1: 3a57b5c0c66e44abd640bfb7d534d018d12c5b39
SHA256: cf77e4ba1f4a61c3d8b0b70a4dfee5078df3b8a0a6ca72cfcdb6222a6e9ef7a3

task.bat 
MD5: fcf7eff91abdee43a4eadbcca9873d20
SHA1: fc107b1138154af09ed6a1ed0d34fa3d832658eb
SHA256: dad43080882c990ab7576d435b7609abba178cbbdea6a9e096da1063d2b5c82a

bat.bat
MD5: cef383d91ea7831704ba5b12555f0537
SHA1: 07f68af59bc373a54ca1a7bbccbbc9eb67089de3
SHA256: 8252bdbc46f1a4126f9e7dbb35621cd41c53f5b7f0cf39402fadf21f11c07a21

bat1.bat
MD5: e73f426873e00b81e21bc878090dc94d
SHA1: 02bc1b90815b8acc96c59c56c5c1817b3bd6b088
SHA256: a16c8652c167c564c4d4f5b621d48107ca8072b5849e0d645c198c8c95c4453e

find.cmd
MD5: c4c1b511d084278da6c2ead677e2f3dc
SHA1: 125d195b6c04f52ae1bac074bb755ec4a5031264
SHA256: 7ee1347b1269c5dcedd6965a7179691de8c5de225e471be597e22289049b218f

Подробности