💡 #ANYRUN TI Feeds turn IOCs into continuous monitoring by streaming fresh, validated indicators and behavior-based threat data into your security stack. 📋 IOCs: C2 documentsphotos[.]com getimageinformation[.]com openandopen[.]com openpdfanywhere[.]com Lure (TerminalFix) updatemsnow[.]com updatecurrent[.]com uptodatehere[.]com superwebprotection[.]com exclusivecloudprotection[.]com extrafireprotection[.]com Redirect / fingerprint daskljtitaskastvv[.]pro momsdodigital[.]com beroniw[.]com Dropper 2e86d7adf50329896e81ce0a3d5f2c2bd0cb957bc47c8a69078e25ff6a6d6bba Trojanized mscoree.dll 18e3bc2b57f0de6a14b6abd283fa964ffde5b85bc3985988b56acc0a212b2099 Persistence %PROGRAMDATA%\NET Runtime Optimization Service WtACgCrCWnJB\ HKCU\...\CurrentVersion\Run - "NET Runtime Optimization Service uD9n5qAinyOu"