# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: mirrorstealer, lodeinfo

# Reference: https://www.welivesecurity.com/2022/12/14/unmasking-mirrorface-operation-liberalface-targeting-japanese-political-entities/
# Reference: https://otx.alienvault.com/pulse/639b01a88df8698311dc2b43
# Reference: https://www.virustotal.com/gui/ip-address/167.179.116.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/172.105.217.233/relations
# Reference: https://www.virustotal.com/gui/file/f53c5fd78000755ccfff11d2f1b7d659f4a71c887083697d54b8fe8cf905ef6a/detection
# Reference: https://www.virustotal.com/gui/file/a8ec766eee6cc3c6416519f8407ac534f088637ed1a6bc05ed0596d8a0237548/detection

http://167.179.116.56
http://172.105.217.233
http://45.32.13.180
aesorunwe.com
ninesmn.com