The Ugliest Bulgarian Wannabe Law Enforcement Officer Real Life "Cop" In the Bulgarian "System"

0
February 11, 2024
Can you suck my bottom? Do you have the permission of other people to do it before you suck mine? Do you know what does this constitutes? Let's play a game. If my bottom is in the ugliest and most disgusting part of the universe and you want to suck it does this mean that you're there too? You don't exist.

We in the face of your parents should rather pay you to best yourself and stop existing and make a free low profile non-existent and cheap movie out of it which is something that you shouldn't forget doesn't constitute anything. It's the very art of having you beat yourself courtesy of your parent's money and having the very same non-existent Bulgarian dipshits pay you to beat yourself. While beating yourself you can easily forget about compilations and series of movies about your beating simply because your very ugliness and disgusting existence doesn't compare to that of a human being.
Continue reading →

Retiring

0
January 16, 2024
I'm retiring. Ebay memorabilia auction soon with some surprises. I'll post a link here. All of my research 2005-2023 here - https://archive.org/details/@ddanchev Yours sincerely. Dancho

Continue reading →

Who's Behind GoatRAT?

0
January 13, 2024

In this brief analysis I'll take a look at who's behind GoatRAT in terms of social media activity C&C servers and actual personally identifiable information.





Personally identifiable information:

hxxp://bit[.]ly/nubankmodulo

hxxp://goatrat[.]com/apks/apk20[.]apk

Sample MD5s:

6583a9b6b83738e0bf2a261fc04483e18772da3241e467fdef37a8e27b1869a7

9a8e85cf1bbd32c71f0efa42ffedf1a0

hxxp://api[.]goatrat[.]com:3008

Social Media:

hxxp://t[.]me/sickoDevz

hxxp://t[.]me/goatmalware

Web site: 

hxxp://criminalmw[.]fun

hxxp://clientes[.]criminalmw[.]fun

WhatsApp - +5511987457894

ba5833b49e2c6501f5bbce90b7948a85

Code Signing Certificate Signed By: Mr[.] Paxton Doyle PhD

SSL: 94ba7810ece1a1b227e6a5b509c8bb228e7285a1a5cee5f0ee26542783d4b09a

Sample C&C servers:

104[.]244[.]75[.]74

138[.]197[.]166[.]92

142[.]251[.]143[.]110

142[.]251[.]143[.]129

142[.]251[.]143[.]142

142[.]251[.]143[.]163

142[.]251[.]143[.]193

142[.]54[.]162[.]114

159[.]69[.]27[.]103

174[.]128[.]250[.]164

185[.]204[.]1[.]84

185[.]225[.]68[.]133

188[.]214[.]132[.]49

216[.]239[.]32[.]36

216[.]239[.]34[.]36

31[.]133[.]1[.]108

51[.]148[.]150[.]203

51[.]81[.]93[.]37

80[.]241[.]214[.]102

82[.]128[.]229[.]109

93[.]115[.]91[.]66

95[.]216[.]209[.]129

Sample C&C servers:

tgutjgo6kvqdst5ock[.]com

olbvu5pv2apkc57zfeg[.]com

hxxp://h4j7ewfdpwfzg6g6[.]com - 185[.]177[.]206[.]72

hxxp://3ajzfjsxou4yzn3jw552dg[.]com - 87[.]236[.]195[.]198

hxxp://f53ia7lqhbg54y7xd7ydp3[.]com - 178[.]63[.]41[.]183

hxxp://lblhluz7or[.]com - 178[.]63[.]41[.]183

hxxp://inylslu7vfq24vb[.]com - 185[.]177[.]206[.]72

51[.]81[.]56[.]136

89[.]163[.]128[.]25

81[.]7[.]16[.]177

81[.]170[.]128[.]221

109[.]70[.]100[.]71

158[.]255[.]1[.]112

j6jvmwqorhq4xpjkcy26d3i4au6pz6nyroqxreefmnl7yxgcruxzkmyd[.]onion

Sample Photos:




Continue reading →

Profiling Russia's Internet Research Agency Project Lakhta Artem Mikhaylovich Lifshits

0
January 12, 2024

An image is worth a thousand words. Here's the link.










Personally identifiable information:

Email: artemlv@hotmail.com

mycryptodeals@yandex.ru

Vkontakte accounts:

hxxp://vk.com/id5856430

hxxp://vk.com/sh0rtnam3

hxxp://vk.com/artemous

Web site: hxxp://smart-shopping.club











































Continue reading →