# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.proofpoint.com/us/threat-insight/post/buer-new-loader-emerges-underground-marketplace
# Reference: https://otx.alienvault.com/pulse/5de7f39a22918ce26c2c2f1b

134.0.119.53:8080
173.212.204.171:443
185.130.104.187:443
45.76.247.177:8080
ffload01.top
garrisontx.us

# Reference: https://www.virustotal.com/gui/file/e7211c80d7f75f2bc5b82acce679c53d834b0a1c58e160b170f7da843e5bd3c9/detection

ortalrustytyo.com

# Reference: https://twitter.com/VK_Intel/status/1217905276545839105

megoliks.net

# Reference: https://twitter.com/VK_Intel/status/1220750726676336641

108.62.118.46:443

# Reference: https://www.virustotal.com/gui/domain/sikorskyleze.com/relations

sikorskyleze.com

# Generic trails

/abc/traff.php
/dmi/traff.php
/nana/kum.php