# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Virus:Win32/Expiro.V#tab=2

avcheck.biz
avcheck.ru
avcheckx2011.ru
cashing.cc
directconnection.ws
gronx-planets.ru
kgbrelaxclub.ru
kidos-bank.ru
ppshafromhugewar.ru
smellsliketervana.com
virtest.com

# Reference: https://blog.talosintelligence.com/2019/10/threat-roundup-for-september-27-to.html (# Win.Virus.Expiro-7192043-0)

atw82ye63ymdp.com
ausprcogpngdpkaf.com
bekvfkxfh.com
bungetragecomedy9238.com
caosusubld.com
citnngljfbhbqtlqlrn.com
dvwtcefqgfnixlrdb.com
gfaronvw.com
grbjgfprk.com
jlaabpmergjoflssyg.com
kbivgyaakcntdet.com
kbodfwsbgfmoneuoj.com
mdofetubarhorbvauf.com
oawvuycoy.com
oeuwldhkrnvxg.com
warylmiwgo.com
wdgqvaya.com
wstujheiancyv.com
wwyreaohjbdyrajxif.com
xomeommdilsq.com
xxsmtenwak.com
ydchosmhwljjrq.com
ygqqaluei.com
ypwosgnjytynbqin.com
yrkbpnnlxrxrbpett.com

# Reference: https://github.com/silence-is-best/c2db#expiro

dovamnabihede.ws

# Reference: https://blog.talosintelligence.com/2020/04/threat-roundup-0403-0410.html (# Win.Virus.Xpiro-7646211-0)

idiotikgangapreacher.ru
ochupophooptudokoowh.ru
usteeptyshehoaboochu.ru
pilomatchdeepdown.ru
poochooshoozoxoachic.ru

# Reference: https://blog.talosintelligence.com/2021/10/threat-roundup-1022-1029.html (# Win.Trojan.Xpiro-9903900-1)
# Reference: https://www.virustotal.com/gui/file/d3222eab50f4b86090270068a62ec8ae8c09cdf7a8a8a6fe774e27f15bc52ee6/detection

amonuwezed-picriv.ws
aninamilixif.ws
aremumhumydoc.in
cakydofytipi.biz
cekhupovoxijyr.com
eletazade-ry.org
juwlewrifithal.in
r8decub-ydyg.ru
r8gefa-bugin.com
r8kegy-bikav.com
r8myjo-boneb.com
upojawnixly-muro.cc
xezlifewvupazah.ws
ytocmoxjedkiciten.biz

# Reference: https://blog.talosintelligence.com/2022/01/threat-roundup-0107-0114.html (# Win.Virus.Xpiro-9934335-1)
# Reference: https://www.virustotal.com/gui/file/ad9a1e1038a5877e30b2fc3151801ffef28dae866b9403c8690687a3980b7562/detection

afibmyza-etofli.ws
axijapvenetu.org
drdecub-ydyg.ru
drdyduc-okuv.ru
drfamab-yjes.ru
drgefa-bugin.com
drgiwu-dunaf.com
drhugaf-isop.ru
drkaqo-copog.com
drkegy-bikav.com
drkoza-diqyk.com
drmoby-dotir.com
drmyjo-boneb.com
drpykyb-aquh.ru
drrevoc-evyt.ru
drsofy-debef.com
drsymi-betop.com
drvahif-ufum.ru
drvewec-yzib.ru
drvofib-oxyx.ru
drxezic-ucah.ru
eqodkitivi-be.cc
eruciluj-etobu.in
ifopluzwuduqak.ws
ikyrejola-ovanal.org
iteqarux-bu.biz
lejnocika-riwe.com
nemjyckotlejice.ws
oqikuxrufzu-hyr.ru
padyhemofosup.ws
qinedyhorwe.ru
yvofimyvywecly.com
zabavuw-ynudi.com

# Reference: http://blog.talosintelligence.com/2022/02/threat-roundup-0128-0204.html (# Win.Trojan.Xpiro-9937847-1)

bukyrurysryvu.ru
ecemi-gyqen.com
edecub-ydyg.ru
ejixab-ekew.ru
ekaba-gywuz.com
ekaqo-copog.com
eleraf-yvot.ru
elizyb-ypud.ru
emyta-habaj.com
enacug-uzof.ru
enilof-azud.ru
epetyf-uxeb.ru
eqiny-fecok.com
eryvof-ibuh.ru
evahif-ufum.ru
exezic-ucah.ru
exybif-ajav.ru
ezubih-inek.ru
kesvawudoqu.ru
pizupedadu.net
ulepatok-ci.biz

# Reference: http://blog.talosintelligence.com/2022/02/threat-roundup-0204-0211.html (# Win.Virus.Xpiro-9938457-1)

angar-promarenda.ru
bobamajopa2018.org
fdecub-ydyg.ru
fgefa-bugin.com
fkegy-bikav.com
fmyjo-boneb.com
fpykyb-aquh.ru
grewz-platker.ru
indir-connectx.ws
kasperskygay-formula.in
kgbrelaxxlub.ru
microavrc-usb33bit.com
mmyjo-boneb.com
mpykyb-aquh.ru
zxspectrum4ever.in

# Reference: https://twitter.com/r3dbU7z/status/1704468416491409784
# Reference: https://www.virustotal.com/gui/file/76e749320ac6fc256a0ea110110337ef282c290b68ced24b3d09c9d25abd9eca/detection

os-js.com