Heavy Anti Evasion found. Two IP involved: Server IP(s):
185.30.176.135
185.30.176.134
Just 1 to flag at VT: https://www.virustotal.com/#/url/800d0fb3c9bf220fb006df2993b4de3e23724b29d8ce64db6219141ded7c2633/detection
More file detections for that loader: https://www.virustotal.com/#/file/e3a631bb0c590a9658025391695685aef16c269e646ead0a2df926c6ad64b09d/detection
Where seen: https://urlquery.net/report/2087a076-9c60-4c2b-82e4-7a71b38a4a4d
But nothing at VT here: https://www.virustotal.com/#/url/c44d1c65634b8d9d96ebb25439985ccf2684fb3db412bf51fdbe32e8c0188350/details
Found failed attempts to download JuggerenLoader_d.exe
polonus