# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/fileless-cryptocurrency-miner-ghostminer-weaponizes-wmi-objects-kills-other-cryptocurrency-mining-payloads/
# Reference: https://www.virustotal.com/gui/ip-address/118.24.63.208/relations

http://103.105.59.68
http://118.24.63.208
yanxiaoyang.top

# Generic trails

/Update/CC/CC.php