# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://securelist.com/blog/research/59387/an-sms-trojan-with-global-ambitions/

x-bt.in
y-bt.in
botmgr.net
anid.in
icemob.net
ftop.org
midex.org
wapon.org

# Reference: https://www.virustotal.com/gui/file/a0915b66e686630304f895a3e5f697f8b3a0031ce0d5fb66c37ebc1b72b9a543/detection

1downloadss0ftware.xyz

# Reference: https://www.virustotal.com/gui/domain/moyandroid.ru/relations

moyandroid.ru

# Reference: https://www.virustotal.com/gui/file/448557264e7a95eeb21b8e76f1371e453603ff585bbebfb679dcd0e43514948a/detection

arrayinfosystem.com

# Reference: https://www.virustotal.com/gui/file/dcc0eae038c00e46651a3410b5ca22c5e7b1fd2853f6e2c697b0904bdfb42986/detection

zouiri.com

# Reference: https://www.virustotal.com/gui/ip-address/37.1.218.29/relations
# Reference: https://www.virustotal.com/gui/file/05ca36703d8b9fe02e65326e5cebb696cd7076c08dbdac0db9466fd22f82089d/detection
# Reference: https://www.virustotal.com/gui/file/eae56e103309ad76d3b261dc94ad09feb85a5e259ce7162d8f22ff737b74a71a/detection
# Reference: https://www.virustotal.com/gui/file/c4f2c7a614450ffe1aae4243ab7a2cf5bd45d336aa1b34e2963208a7bed9f2a2/detection

apk-disc.ru
diskandroid.eu
free-apk.biz
files-apk.ru
filestack.ru
wapsliv.ru

# Reference: https://www.virustotal.com/gui/domain/vkero.ru/relations

vkero.ru

# Reference: https://www.virustotal.com/gui/file/a30242816d5b679ed6328d37cfc39deb52986b9900511f0b9e9adee024764030/detection

android-google.ru

# Reference: https://www.virustotal.com/gui/domain/wapkl.com/relations
# Reference: https://www.virustotal.com/gui/file/04f41f8897c8cee3f296223255404eb2e32f58e698fe1e1382f466aaaeadec06/detection

wapkl.com

# Reference: https://www.virustotal.com/gui/file/2a4dc8f1d796fed3f3d4464059499fae4049a2db562cd91dbe3043eb59ccf973/detection

winjitapps.com
winjitwine.cloudapp.net

# Reference: https://www.virustotal.com/gui/file/6849d86a99d366a580a718983b70285a5dca53dd9cdaf22359eae2b3858bd351/detection

get-app-data1.xyz

# Reference: https://www.virustotal.com/gui/file/eff8c27e3a026b789ca3b543754f145a8c53f502b979da1f2fcaf6d38e85d60e/detection

navjivangroup.in

# Reference: https://www.virustotal.com/gui/file/0bbc3d4b159a037803c784450daeb42004c56636cf23677fefbd7eeaef2f3909/detection

tracker-stat.com

# Reference: https://www.virustotal.com/gui/ip-address/154.81.50.140/relations
# Reference: https://www.virustotal.com/gui/domain/yp8.biz/relations

gn8.biz
yp8.biz

# Reference: https://www.virustotal.com/gui/file/8c8aa01b8e2d156766fb28dad3892be886024e248fd376ca9c06ddb7f11deaf5/detection

http://91.213.175.176

# Reference: https://www.virustotal.com/gui/file/c6e8bc2fbbe26305e6fb4d0dbb9583a62fe2401a76e1300851124ebba89b60a2/detection

waply.ru

# Reference: https://www.virustotal.com/gui/file/0000764713b286cfe7e8e76c7038c92312977712d9c5a86d504be54f3c1d025a/detection

m-001.net

# Reference: https://www.virustotal.com/gui/file/00244c64562956e736ffb45e111e5245eed20abf02633a06ea4af4e95f132deb/detection

kdfndsk.net

# Reference: https://www.virustotal.com/gui/file/01a5a803246ca989b602302830b24719373ecf566bbc37b8e617b517906fa3b8/detection

o5sms.ru