-----

# 1 | 13


-----

# 2 | 13


-----

# 3 | 13


-----

# 4 | 13


-----

# 5 | 13


-----

# 6 | 13


-----

# 7 | 13


-----

# 8 | 13


-----

# 9 | 13


-----

# 10 | 13


-----

# 11 | 13


-----

|Type|Observable|
|---|---|
|Domain|orionfile[.]com|
|Domain|tawaranmurah[.]com|
|URL|http://www[.]tawaranmurah[.]com/home/newitems.php|
|URL|http://www[.]orionfile[.]com/rssfeeds/lang1.php|
|IP|81[.]4[.]100[.]197|
|Artifact|479b9e6d7a5d35d8854756be845de34e270214d145ddbd8f70b0c9755b4a62a8|
|Artifact|6373cceae42086db2ec0d7d801540206ad7cd16130f0fdc0bf1d5e20cca876d6|
|Artifact|98214a8ff23135a1e92e2ab029a4806cd1501d0a190798cf37bec90b2b20729e|
|Artifact|c0d70c678fcf073e6b5ad0bce14d8904b56d73595a6dde764f95d043607e639b|
|Artifact|d7ce022a6bad033fd22b76259ed4071b2d76f1ec547b2924411824aa7362e442|
|System|[install_path]\ packages\stop.tmp|


## Type Observable

Domain orionfile[.]com

Domain tawaranmurah[.]com

URL http://www[.]tawaranmurah[.]com/home/newitems.php

URL http://www[.]orionfile[.]com/rssfeeds/lang1.php

IP 81[.]4[.]100[.]197

Artifact 479b9e6d7a5d35d8854756be845de34e270214d145ddbd8f70b0c9755b4a62a8

Artifact 6373cceae42086db2ec0d7d801540206ad7cd16130f0fdc0bf1d5e20cca876d6

Artifact 98214a8ff23135a1e92e2ab029a4806cd1501d0a190798cf37bec90b2b20729e

Artifact c0d70c678fcf073e6b5ad0bce14d8904b56d73595a6dde764f95d043607e639b

Artifact d7ce022a6bad033fd22b76259ed4071b2d76f1ec547b2924411824aa7362e442

System [install_path]\ packages\stop.tmp

# 12 | 13


-----

# 13 | 13


-----