rkskumzb.com(SageCrypt ransomware hosted in Russian Federation Samara Jsc Er-telecom Holding

Domains used by the sample :

rkskumzb.com 46.0.141.233
gesofgamd.com 46.173.218.203

Path from webserver :

 /ykbi9t1w8/index.php

Sample : hxxps://formwest.co/nst.exe

Hosting infos :
https://whois.domaintools.com/46.0.141.233

Categories: Uncategorized