# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: DarkComet, DarkKomet

# Reference: https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Backdoor:Win32/Fynloski.A

slimx.comule.com
slimmy.noip.me

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Fynlosk-AC/detailed-analysis.aspx

malka-reklama.com

# Reference: https://www.virustotal.com/en/file/88b322f35736cb13ecaba8539366da9282321945f37deded86aab3a6d3418d95/analysis/
# Reference: https://malwr.com/analysis/ZTFkNTkyOTIyYWY5NGQxNDg3OThhOThmMDY5NGM0OWQ/
# Reference: https://malwr.com/analysis/NTliNzQ4MmUwODVlNGMxNWJiZmExMDViYTJjNzRkNmM/

nobodywithyou.quicksytes.com
unfaithfull.mine.nu
nobodylikeyou.broke-it.net
unfaithfull.golffan.us
noremotenj.dnsfor.me

# Reference: https://blog.talosintelligence.com/2018/09/threat-roundup-0907-0914.html (Win.Dropper.Darkkomet-6680876-0)

val.myftp.org

# Reference: https://citizenlab.ca/2016/08/group5-syria/

alienfiend.3utilities.com
alirezaz74.no-ip.info
amiir.ddns.net
ashiyane.ddns.net

# Reference: https://citizenlab.ca/2015/10/mapping-finfishers-continuing-proliferation/

a.ddns.me
r.ddns.me

# Reference: https://twitter.com/Racco42/status/1046878564359000064

elumadns.eluma101.com

# Reference: https://twitter.com/ScumBots/status/1048377827765223430

control-pc.ddns.net

# Reference: https://twitter.com/fumik0_/status/1050643239273779200

fanddes.ddns.net

# Reference: https://twitter.com/JAMESWT_MHT/status/1108304088477900801

malconwire.ddns.net
mstanley.ufcfan.org
winningstar.ddns.net

# Reference: https://twitter.com/JAMESWT_MHT/status/1118088254224515072
# Reference: https://app.any.run/tasks/99fa923c-c2dd-4915-83d5-9ce6c00263ed
# Reference: https://www.virustotal.com/gui/file/9a35d2cb233f438f07289232971a82c0b70ada771a4769194686c83414abfed6/detection

egusi.duckdns.org
197.210.47.22:1007

# Reference: https://twitter.com/James_inthe_box/status/1029772632638382080

51.254.93.85:22475

# Reference: https://twitter.com/MalwareConfig/status/1110622163579609089

jorqoad.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1109895184962281472

cystau.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1093695806681595904

cometdb.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1070995860169900033

anees123.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1066549338007064581

zedofrus.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/1050203774235619329

findmeifyoucan.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1040695642690076672
# Reference: https://malwareconfig.com/config/b6d5270e6708908ff56aa91b1819be27/

194.44.227.222:1604

# Reference: https://twitter.com/MalwareConfig/status/1036255817845153792

allachaib54.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1036008342295064576

kurusuntirki.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/1024410533049643008

tifil.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/1024275294688030721

idkh.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/1023488007721181185

kctgame.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/1021734919297552385

beratrat.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/1021660959155388418
# Reference: https://malwareconfig.com/config/349a4cbe64bbecf8a43ca004ba48ea41/

172.116.36.28:1604

# Reference: https://twitter.com/MalwareConfig/status/1021047304143466497

ratlikecomet.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1016305113152008192

alone.sytes.net

# Reference: https://twitter.com/MalwareConfig/status/1015594560356003843
# Reference: https://malwareconfig.com/config/706eeefbac3de4d58b27d964173999c3/

178.32.64.21:81

# Reference: https://twitter.com/MalwareConfig/status/1000913617460580352
# Reference: https://malwareconfig.com/config/c65c3c8c4035481a6833394476c82ff1/

176.114.132.28:1605

# Reference: https://twitter.com/MalwareConfig/status/993336313163276288
# Reference: https://malwareconfig.com/config/41c60a7201487465e7e06921b20c3ec8/

5.68.159.105:1337

# Reference: https://twitter.com/MalwareConfig/status/992510560636997639
# Reference: https://malwareconfig.com/config/d953a90802ca685f564ee9a4562f8304/

81.177.118.99:1604

# Reference: https://twitter.com/MalwareConfig/status/988144017291476993

1kd2sd8hj59et7.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/985184013752197120

bitcometer.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/982174275128909824
# Reference: https://malwareconfig.com/config/f58e5c0213c3d16c0735d5a53ff2b2ce/

88.135.201.49:1604

# Reference: https://twitter.com/MalwareConfig/status/980798013642862593
# Reference: https://malwareconfig.com/config/ad20b1d4c948a33f0ffbfdc2aaf5275a/

46.133.93.140:1604

# Reference: https://twitter.com/MalwareConfig/status/978382269709799425

melsamt2.sytes.net

# Reference: https://twitter.com/MalwareConfig/status/967183823904571393
# Reference: https://malwareconfig.com/config/dac38cf99b17d169152e53c1909896ca/

31.29.110.138:1604

# Reference: https://twitter.com/MalwareConfig/status/964901768357347330

malware_darkcomet.no-ip.com

# Reference: https://twitter.com/MalwareConfig/status/958360238100541440

ndudim.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/956435746155528192
# Reference: https://malwareconfig.com/config/d0827f339213526025e5d25806eb1bf9/

84.83.77.156:1605

# Reference: https://twitter.com/MalwareConfig/status/956352184676945920
# Reference: https://malwareconfig.com/config/94a3ba517774ec75c2928879087f64ef/

54.38.22.64:2808

# Reference: https://twitter.com/MalwareConfig/status/956085348664270848

ykrop.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/953463824681717760

anh.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/951441936099012611
# Reference: https://malwareconfig.com/config/742a341678f66bc969401a6afccd1a7e/

37.195.251.26:1604

# Reference: https://twitter.com/MalwareConfig/status/951196978117038080

1xdemre.sytes.net

# Reference: https://twitter.com/MalwareConfig/status/950352270692179968

mobie.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/946043994164940800

suicrat.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/937772819055816704

irat4ever.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/932320480694030336

perdrix21.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/928402828158267395

itsbrad.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/927721815413329920

evgeniy1983.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/925781063170961415

topbasbatu000.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/922866417594232832

guanyu2017.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/921413570440695808
# Reference: https://malwareconfig.com/config/cf86e1fe687c4c3dd7f1c2fc5c662f2d/

185.61.149.134:1148

# Reference: https://twitter.com/MalwareConfig/status/919255144545562625
# Reference: https://malwareconfig.com/config/c19af36a86eca599c5a24ef3582255cb/

109.94.66.144:1604

# Reference: https://twitter.com/MalwareConfig/status/912167055285264384
# Reference: https://malwareconfig.com/config/7257431744eb3247e7bf6f58a8eb2691/

178.158.128.49:1604

# Reference: https://twitter.com/MalwareConfig/status/910913066316988416

lossehelin.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/910912902118420480

qwerty123456.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/910911784063729664

watsapp.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/906945447423508480

faruk01.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/906276838221205504

convict.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/905548741087809536

hamo55.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/904080750647095301

mrwhite8391.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/903754437151293440
# Reference: https://malwareconfig.com/config/10a1dbde59ddeb9bc757974c5cffe372/

85.104.8.203:4554

# Reference: https://twitter.com/MalwareConfig/status/903144131630911488
# Reference: https://malwareconfig.com/config/0401f5024825df5f58fd63cd2568fc2b/

37.193.25.56:1604

# Reference: https://twitter.com/MalwareConfig/status/900228130908102656

emir695.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/900217070968872961

286128.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/900057371027918848

owelemre2.sytes.net

# Reference: https://twitter.com/MalwareConfig/status/899777027351474177

memelek.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/899708530349010945

cevadergn.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/899704791420588033

ambuk.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/898699148358291456

ehenderson1996.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/898451580386541568
# Reference: https://malwareconfig.com/config/a61b1388bd22975c6558a3cbe5286f8c/

61.34.250.106:1604

# Reference: https://twitter.com/MalwareConfig/status/898356313406791680

rodrigonj99.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/898316265323864064

kingeyes.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/898312613301497857

mekan077.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/898300001096544256

aliasbond.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/898254456587829248

loafer00.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/898247023060701185

thewalkers.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/897472908498481152

ehenderson32.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/894159512730578944

bentester.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/893438443224784897

fannii.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/893438328065986560

rmznsinstr.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/893002193254723585

legacylol.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/890017219060649984

ihack.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/888531040230309888

refflexx.hopto.org

# Reference: https://twitter.com/MalwareConfig/status/882871663934812160

darkcomete.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/880781602158194688

chapropaxas.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/879114139486101504

ecofriendster.com

# Reference: https://twitter.com/MalwareConfig/status/863803239791292416

csgohacker2017.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/863327587187249152

zxmn.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/861251179367587841

enesmt2-logo.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/861012250810888192

enesmt2.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/857675716036526080

billhosts.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/857344636381270016

yunuscan.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/857101248243396609

dc1604kzl.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/856747439105159168

ahmetbay.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/856232287985438725

vahdi12.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/852138277377388545
# Reference: https://malwareconfig.com/config/9026246afcc01ef5c5c8961dc1c6bc37/

217.44.145.105:1604

# Reference: https://twitter.com/MalwareConfig/status/848914914274140164

rat12411.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/848135538007838720

Hierro1.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/846713975190556672
# Reference: https://malwareconfig.com/config/0487fed0aa52334d15911e5384c0d410/

80.61.35.94:1600

# Reference: https://twitter.com/MalwareConfig/status/846688338153230336

xose01.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/843832787610320900

1po4tip.3utilities.com

# Reference: https://twitter.com/MalwareConfig/status/842080814074605571

mavileylek.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/842080723624439810
# Reference: https://malwareconfig.com/config/8858d5a020fe2ae5a03574a7103702d8/

emircanaktas.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/841597432337203200

batuhan32200269116.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/839149275791704065

siradanpc12.dynu.net

# Reference: https://twitter.com/MalwareConfig/status/838150119476310016

kagero-grup.sytes.net

# Reference: https://twitter.com/MalwareConfig/status/821970069358084097

cemal334.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/821302409813262336

cw.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/818865344886558724

tstdc.3utilities.com

# Reference: https://twitter.com/MalwareConfig/status/817421933608370176

sanana.hdd.com

# Reference: https://twitter.com/MalwareConfig/status/816026893631844352

ketref38.dynu.net

# Reference: https://twitter.com/MalwareConfig/status/812818261347893248
# Reference: https://malwareconfig.com/config/2d9bf3f12890104ecd523f844859489f/

81.100.129.159:4789

# Reference: https://twitter.com/MalwareConfig/status/806979375040233472
# Reference: https://malwareconfig.com/config/61f07e2d14ece932f5e520bf4c9916c3/

149.255.62.14:1604

# Reference: https://twitter.com/MalwareConfig/status/804458441976725505
# Reference: https://malwareconfig.com/config/c72a7164844dca1a6386d4d5a3585815/

82.103.140.48:1604

# Reference: https://twitter.com/MalwareConfig/status/803636805279031296

massarbaba.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/803500980214124544

banthisbitxh.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/798276892864421888
# Reference: https://malwareconfig.com/config/db1136d52bb1f563253c9dd7b9e33dfb/

86.128.42.185:100

# Reference: https://twitter.com/MalwareConfig/status/796589840192143360

samuli.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/796110751744266245

blessedchuks.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/791971477671280640

jimmybob231.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/790199387590889472

ahmedsaleh.no-ip.info

# Reference: https://twitter.com/MalwareConfig/status/790183969413357572

elopasemq.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/790180399452389378

tacidreaq.no-ip.info

# Reference: https://twitter.com/MalwareConfig/status/790178614490779648

hackman83.no-ip.org

# Reference: https://twitter.com/MalwareConfig/status/790171154778554370

tatuti.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/790170953212985344

abod12345.no-ip.info

# Reference: https://twitter.com/MalwareConfig/status/790167660034220036

ratyou.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/790165889551306752

oxhacker5.no-ip.info

# Reference: https://twitter.com/MalwareConfig/status/790161745495097344

anasek.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/790156009704685568
# Reference: https://malwareconfig.com/config/fb6fe9ce3fb60662de59b0d3f2f1a900/

falumir24h.servegame.com

# Reference: https://twitter.com/MalwareConfig/status/790155881015087106

onetwone007.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/790153534738169856

jjleo.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/790151613247782916

dnnirfan.zapto.org

# Reference: https://twitter.com/MalwareConfig/status/790149013370724352

lanremoteadmin.no-ip.org

# Reference: https://twitter.com/MalwareConfig/status/790146263614455808

dedilivisoft.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/784740796281065472

zirconpvp.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/784717845582274560
# Reference: https://malwareconfig.com/config/39360b2ac89e3f789632a498635ea53d/

88.75.173.240:81

# Reference: https://twitter.com/MalwareConfig/status/783251715151818752

Flythief.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/779638685151166464

duckysiker.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/778618987848601600

brokerr1.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/776415665246920706

at0x.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/774130450746871808

arrivals.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/772097961165778945

azarxd.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/769232194959183872

sozluk.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/765431761195134976

pisr.no-ip.biz

# Reference: https://twitter.com/MalwareConfig/status/765276865913298945

tytusandronicus.suroot.com

# Reference: https://twitter.com/MalwareConfig/status/762934405761527812
# Reference: https://malwareconfig.com/config/bb042ea1efbb153eceb81ead99ca40c8/

174.61.87.89:1604

# Reference: https://twitter.com/MalwareConfig/status/753691591337017344
# Reference: https://malwareconfig.com/config/e10407f76f1f68cfd15419b9f9fbe8a2/

100.7.41.35:1604

# Reference: https://twitter.com/MalwareConfig/status/753244223584043009

eprice.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/752960699287101441

testpourvoirkimahack.no-ip.org

# Reference: https://twitter.com/MalwareConfig/status/751129638970200064

dakdns1.duckdns.org

# Reference: https://twitter.com/MalwareConfig/status/750828815656558592
# Reference: https://malwareconfig.com/config/9e516fadabf7246a846af83715c6c961/

94.183.16.82:1604

# Reference: https://twitter.com/MalwareConfig/status/748820464617807872
# Reference: https://malwareconfig.com/config/afaf914aa49af9ab06cfecf21439a778/

89.164.152.8:1605

# Reference: https://twitter.com/MalwareConfig/status/748818887526014976

destinyhacked.ddns.net

# Reference: https://twitter.com/luc4m/status/1072888268528779264

pd1n.ddns.net

# Reference: https://twitter.com/MalwareConfig/status/1127517851852713984

abdoaks-41628.portmap.io
193.161.193.99:41628

# Reference: https://twitter.com/MalwareConfig/status/1128313177253535744
# Reference: https://malwareconfig.com/config/df577ed4df4a7ff3f219b54793fa4249/

nonmo.duckdns.org
95.65.129.254:3323

# Reference: https://www.fireeye.com/blog/threat-research/2014/04/crimeware-or-apt-malwares-fifty-shades-of-grey.html

akuna.mcdir.ru
privatecode.zapto.org

# Reference: https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf

5.189.145.248:1453

# Reference: https://twitter.com/KorbenD_Intel/status/1169996681259245569

newdarkcomet.daniel2you.com

# Reference: https://twitter.com/JayTHL/status/1189283483031670784

176.116.138.8:1604
lz747.ddns.net

# Reference: https://twitter.com/JayTHL/status/1189371424441540613

91.247.92.191:1604

# Reference: https://blog.talosintelligence.com/2019/11/threat-roundup-1025-1101.html (# Win.Trojan.DarkComet-7365618-1)

mrsnickers03.no-ip.biz

# Reference: https://malwareconfig.com/config/7336917d4220081386839c0b8ac8c8c9

58.189.48.187:1235
groaqohtw.duckdns.org
pluewredw.chickenkiller.com
sbyclaudl.ddns.net

# Reference: https://www.virustotal.com/gui/file/17664df09aa7b847890126d806ebcaec2cb9eaeeb68f6a32ae5b1ed9de11710f/detection

slorb.ddns.net

# Reference: https://twitter.com/JayTHL/status/1195043904959197190

92.63.110.250:1604
dd242sww.ddns.net

# Reference: https://www.virustotal.com/gui/file/131ec6981504c91fbd735f9c9a2b0f70f9b7797468279768e202229fa65dddd0/detection
# Reference: https://www.virustotal.com/gui/ip-address/213.208.152.210/relations

213.208.152.210:7676
maka321.serveftp.com
nathan22.ddns.net
nathan23.ddns.net
nedpmpm.ddns.net

# Reference: https://twitter.com/JayTHL/status/1197946059558981637

178.123.30.130:1604
coldwarn.ddns.net

# Reference: https://www.virustotal.com/gui/file/f919c1b2662c0a9b33669f200989dc9a4269bfde78775e1f146baec3ebfb3a0c/detection

simochka.hopto.org

# Reference: https://www.virustotal.com/gui/file/e64a2c5683ed7236f0139a1dec23f60435376dd34b57f576054bdc87034f4be8/detection

79.134.225.89:1906
elumadns.eluma101.com
oluwa102.hopto.org

# Reference: https://blog.talosintelligence.com/2019/11/threat-roundup-1115-1122.html (# Win.Malware.DarkComet-7395004-1)

lolmands.chickenkiller.com

# Reference: https://www.virustotal.com/gui/file/7294aef18599ab8be993ed60d9d99b86f37519e3a363a3559b3d6787130e884a/detection

graceman.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/b5f9f16ebc7f98c4f561ffec1f000d2ae2f94fbff9468bdd54f8197792e5d710/detection

212.83.170.126:650
zebircp.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e891ac1ac38f68825ac43899d513dae488064b8f9ae5bba38f1e9ee597418a52/detection

134.0.111.33:1604

# Reference: https://twitter.com/Littl3field/status/1188957733296529411

anonim321.ddns.net

# Reference: https://www.virustotal.com/gui/file/89f54d569487466bc6107cc627be0c2e156ea5fad2d58e8bc9575c2b650a79a1/detection

77.121.107.111:1604
77.121.107.111:27015

# Reference: https://www.virustotal.com/gui/file/de2a70a912c77ff2474d39d4329fda59c68c19c2b1cfb681a86b68f3c70e00b6/detection

dermindra.mywire.org

# Reference: https://www.virustotal.com/gui/file/c38787d9ec611ffc0bf51bba81fa954cfa5c7762294da81fecca4d393721f4e2/detection

95.59.27.194:1604

# Reference: https://www.virustotal.com/gui/file/214018c923bca8493dfefa0401ba7eeb836a6bd7ab7212b85d97fe44385aac51/detection

193.84.64.159:1604

# Reference: https://twitter.com/Paladin3161/status/1183584735563374594

fyzee.top

# Reference: https://twitter.com/Paladin3161/status/1158694257370120193

jimmykarcter.ddnsking.com

# Reference: https://twitter.com/Paladin3161/status/1157688436536426503

212.100.94.58:4174
amariceo.duckdns.org

# Reference: https://www.virustotal.com/gui/file/107f96a8eb7a09cf92578c9962104e68434bf7ecb3b12e91c51154fecfd3ae54/detection

212.100.77.240:4174

# Reference: https://www.virustotal.com/gui/file/377cb36c07f059e3e46752e56a9fcf79aa673d453272edaa30a2fa83ecbf5780/detection

212.100.80.150:4741

# Reference: https://www.virustotal.com/gui/file/377cb36c07f059e3e46752e56a9fcf79aa673d453272edaa30a2fa83ecbf5780/detection

105.112.18.199:4174

# Reference: https://www.virustotal.com/gui/file/f9ac49bde20975ac8a5ea01812df0743f9c4a36c2a17866d621d7d53812040c5/detection

185.244.31.248:4174

# Reference: https://www.virustotal.com/gui/file/dec9db3c5e493cd149bf6235eddca0e97b14176b95f3b04809a96647d6e6cae0/detection

192.69.169.25:1909
outofspace.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d78d698387d7206a83d655c82476206dbf4c0ad7e85e69cea127e6a21e0867bf/detection

154.16.220.184:1909

# Reference: https://www.virustotal.com/gui/file/8e88cbc0451706c999bfaa5f3a13e6b30a0b397d4741fc9d6857a0cc6f15200c/detection

185.140.53.102:5001
79.134.225.46:5001
91.193.75.181:5001

# Reference: https://www.virustotal.com/gui/file/418c3d4c20019801ca899f73ab150f4278421e6ed00bc17b81ff2f61412cec52/detection

41.47.195.67:1604

# Reference: https://blog.talosintelligence.com/2019/12/threat-roundup-1206-1213.html (# Win.Packed.DarkComet-7433889-1)

alaka.no-ip.biz
bbdl.ddns.net
botofvps.no-ip.biz
laloutrecam.no-ip.org
server-49.sytes.net
simond.zapto.org
who-is.ddns.net
zcitizen.no-ip.org

# Reference: https://www.virustotal.com/gui/file/97bbd6baec79e66608a0f69e85b2deb90d4bcbe458b8361a540a0f013951c88f/detection

83.5.80.149:55565

# Reference: https://www.virustotal.com/gui/file/92bd1ddf0917990306cb2d94f888cd5d4d7e3e2553e7036daf99e601ddaf9dc9/detection

83.5.80.151:55565

# Reference: https://www.virustotal.com/gui/file/ff90842f11b382e6f54c431ac19140da98fbbee1789acd70fb2b9f44bfc34219/detection

83.7.183.229:55565

# Reference: https://www.virustotal.com/gui/file/7df3beeb988e34f6f7220aab8b831607294158dc4c53aff1bd3c7ca903b1fdaa/detection

83.4.242.75:55565

# Reference: https://www.virustotal.com/gui/file/63c511f39c25ab211385aee0046c3c4fee44d29d611eeea0cf2be2ac93809623/detection

83.4.252.111:55565

# Reference: https://www.virustotal.com/gui/file/94b8c6acecd827134c8191b4da66872ef4586aa2f315d3b932b426af85a71d93/detection

83.4.229.8:55565

# Reference: https://www.virustotal.com/gui/file/ca593ab0ffb04a72a0a756fc471ec6d7b9b4f2d579c94692d261da77b54c808d/detection

94.73.36.254:1604
crazyzombie.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1c77569e984944aa6aedd9f0db41d5cbce3b3e3b9c2c200c7333f83a484c020c/detection

kingraiderbruh.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/ca1e1feeec5138c6be6c6b4b3f7a939e3a4fd01af4b0272fab729ef90323336b/detection

ilyaes12.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/9aeb47408b5d55bfd1957997ac4ddc88e9ac97f8e9b20a7a95263640b5898c29/detection

dingo4tn.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/53249502c44b937365c75f7f102d79d29a2ad39859e1c86622de4540409848a9/detection

omar37.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/17e16829e28a6b3d8e6894bde0159180c0496340b639381bb1d9dd9e01a5e972/detection

yu9.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/d32aea9c897b1603302369c4ac13a7b6e2f5604c8c3ab869b9aba972f4bb7681/detection

94.73.32.235:1604
ramboxxx.no-ip.info

# Reference: https://www.virustotal.com/gui/file/c50bd1e4d69ffef704d8d2e2964bc87916fcc201ef1194b5802b1c3a6509fa97/detection

modr.no-ip.info
modrshk.no-ip.info

# Reference: https://www.virustotal.com/gui/file/c0f68884bf0c8a947a3cfbeb329273f1f43ebd5457fad909855b0b54b98812b6/detection

ygo.no-ip.info

# Reference: https://www.virustotal.com/gui/file/197f7c8fc7e608f1ba07aba11c991056b15aa03b492d9cf02ed094c169a2a8e6/detection

runaway2.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/ce785e02f2b24fe95e5915eaeb866db1796791cfda59eef26be68a182d02b900/detection

94.73.33.36:6644

# Reference: https://www.virustotal.com/gui/file/e9f55f4652ef8d8f9a6d373eace19e08d29d1d0a391be0ccc27b2b02e156986a/detection

94.73.33.36:1338
bl4cks0ul.no-ip.info

# Reference: https://www.virustotal.com/gui/file/c8cb5754952107507550b8343ec3acf15b0c7195b8f4f93d3152b9e4f6e289b1/detection

31.13.65.17:8080
69.171.228.74:8080
69.171.230.18:8080
94.73.33.36:8080
satan666evil.gotdns.ch
satancracker.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/de19d8ea2911ff7e337823576e214151ad4426206db8e9ea9880778f2592f935/detection
# Reference: https://malwareconfig.com/config/ec692bde91ad1c6e182843bc0a5c7e81

seguridadsocial.ddns.net

# Reference: https://www.virustotal.com/gui/file/e3142c50a9c097003c66fc83f31d46798862dccb983728f3a777737e662b02cc/detection

79.134.225.122:1607

# Reference: https://www.virustotal.com/gui/file/c176c510cdc4c587528c7b3fd414ff373f966e669243ade0f76bc674e8053a9f/detection

192.253.246.144:1607

# Reference: https://www.virustotal.com/gui/file/887882af88b520def045ebd160c5fdef397cecd4d38a5f9f671f2da3c6635275/detection

192.253.246.140:1607

# Reference: https://www.virustotal.com/gui/file/92372f11635906b7039356bd6b4bdcd94c24de17e921ca8bd0168088c0e64439/detection

192.253.246.136:1607

# Reference: https://www.virustotal.com/gui/file/a662f3c32b1d51a5312210ba7f19533530dc896497eac762897123d49b8d1719/detection

192.253.246.142:1607

# Reference: https://www.virustotal.com/gui/file/8594136c769d508d553fda7f8b421baab15976eceb0dbe7d8a1f1ced827f5f6e/detection

192.253.246.138:1607
79.134.225.92:1607