#MultiRAT
More IOC's

vbccorretoradeseguros[.]com[.]br
aresmutfakfss[.]com
tallebudgeranetball[.]org

jsnybsafva[.]click:5014
jsnybsafva[.]biz:8030/7433

Probably delivering payloads using a compromised website
@JAMESWT_MHT
#multirat
#MultiRAT