# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.freebuf.com/articles/paper/166458.html
# Reference: https://researchcenter.paloaltonetworks.com/2018/01/unit42-large-scale-monero-cryptocurrency-mining-operation-using-xmrig/
# Reference: https://malwarehunters.co.uk/iocs-mining-malware-targeting-monero-cryptocurrency/

pool.gq
pooling.cf
adespresso.ru
a.pool.ml
b.pool.gq
c.nana.gq
f.pooling.cf