# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://forums.juniper.net/t5/Threat-Research/Masad-Stealer-Exfiltrating-using-Telegram/ba-p/468559

http://187.ip-54-36-162.eu
http://37.230.210.84
bgtyu73.ru
masadsasad.moy.su
teleg.run/jew_seller
zuuse.000webhostapp.com

# Reference: https://twitter.com/Sebdraven/status/1247077032233754624
# Reference: https://app.any.run/tasks/36f1e991-0db1-43f6-8f78-dbe77b0e46a1/

teosd1.000webhostapp.com