不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様7社 -
2025/03/25
※2025/03/25 更新
マルウェア感染させると考えられるURLを検知（2025/03/25）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://u1[.]issuingdingbat[.]shop/1zlpua4e55[.]mp3 hxxps://u1[.]issuingdingbat[.]shop/p0w9xrvzpq[.]mp3 hxxps://u1[.]issuingdingbat[.]shop/94bcss1mnc[.]mp3 hxxps://u1[.]issuingdingbat[.]shop/quibejll51[.]mp3 hxxps://u1[.]issuingdingbat[.]shop/hpj65kucbb[.]mp3 hxxps://u1[.]issuingdingbat[.]shop/1sas2v1iry[.]mp3 hxxps://u1[.]defrostbrilliant[.]shop/xw8wcpgkpl[.]mp3 |
ClearFake |
| URL | hxxp://62[.]60[.]226[.]112/public_files/eirSmAc[.]txt hxxp://62[.]60[.]226[.]112/public_files/ngjmAed[.]txt hxxp://62[.]60[.]226[.]112/public_files/kcmIAAn[.]txt hxxp://62[.]60[.]226[.]112/public_files/pckkIFf[.]txt hxxp://62[.]60[.]226[.]112/public_files/kddIpeA[.]txt hxxps://ziudan[.]shop/nusicinmind[.]mp3 hxxp://gogetxto[.]life/Posn hxxp://guntac[.]bet/bHWsyOS hxxp://pupmeholk[.]bet/pAoska hxxp://exploreth[.]shop/gYZSP hxxp://areawannte[.]bet/aGXsjX hxxps://panelplxace[.]top/api hxxps://urbaninsi[.]top/api hxxps://suptplystati[.]shop/api hxxps://hannndlehav[.]shop/api hxxps://tfooltaver[.]shop/api hxxps://modernmhake[.]shop/api hxxps://guardiainpets[.]shop/api hxxps://protectaze[.]shop/api hxxps://upgradezunio[.]shop/api hxxps://firepowerf[.]shop/api hxxps://riflesandm[.]shop/api hxxps://guncontrold[.]shop/api hxxps://marksmanmy[.]shop/api hxxps://sniperins[.]shop/api hxxps://defensein[.]shop/api hxxps://discoverou[.]shop/api hxxps://scenarisacri[.]top/api hxxps://townwand[.]top/api hxxps://usefulutivli[.]top/api hxxps://mweteorm[.]top/api hxxps://qnaturecud[.]top/api hxxps://elegangtedg[.]top/api hxxps://conqstructcor[.]top/api hxxps://astralforging[.]top/api hxxp://62[.]60[.]226[.]112/public_files/FFdSkpi[.]txt hxxp://62[.]60[.]226[.]112/public_files/bdIfFrf[.]txt hxxp://62[.]60[.]226[.]112/public_files/kIfpkba[.]txt hxxps://galarona[.]bet/GKAns hxxp://217[.]197[.]107[.]91/login[.]php hxxp://62[.]60[.]226[.]112/public_files/cAapnki[.]txt hxxp://62[.]60[.]226[.]112/public_files/nhFAkcb[.]txt hxxps://artillerygr[.]shop/api hxxps://bossmart[.]shop/file2[.]bin |
Lumma Stealer |
| URL | hxxp://176[.]113[.]115[.]7/files/5163778194/zx4PJh6[.]exe hxxps://176[.]65[.]134[.]153:9912/20abda5e27a457d5bae88f8/smgx4whh[.]hodau hxxp://62[.]60[.]226[.]112/public_files/ajdhfpb[.]txt |
Rhadamanthys |
| URL | hxxp://45[.]164[.]177[.]134:11762/Mozi[.]m hxxp://182[.]124[.]18[.]157:33940/Mozi[.]m hxxp://45[.]164[.]177[.]172:11759/Mozi[.]m hxxp://113[.]121[.]69[.]251:38859/Mozi[.]m |
Mozi |
| URL | hxxp://beesco[.]net/second/chief3/fre[.]php | LokiBot |
| URL | hxxp://176[.]65[.]144[.]3/host/ORIGINNEWWWW[.]exe hxxps://talentrecruitments[.]com/admin/ConvertedFile[.]txt hxxp://172[.]245[.]208[.]13/web/ori[.]exe hxxps://api[.]telegram[.]org/bot5811225301:AAGG071-PNHBjLR9uzSRyE9tc6lrnSAm1Mk/ hxxps://talentrecruitments[.]com/ConvertedFile[.]txt |
Agent Tesla |
| URL | hxxp://176[.]65[.]144[.]3/dev/xenbuild[.]exe | RedLine Stealer |
| URL | hxxp://176[.]65[.]144[.]3/host/kent[.]exe hxxp://104[.]168[.]7[.]32/xampp/sv/new_image[.]jpg hxxp://172[.]245[.]208[.]13/web/rem[.]exe hxxp://172[.]245[.]208[.]13/web/rem[.]zip hxxp://104[.]168[.]7[.]32/910/madebestthingsgivenbetterplacesgood[.]txt |
Remcos |
| URL | hxxp://62[.]60[.]226[.]112/public_files/oSnSpfr[.]txt | Amadey |
| URL | hxxp://176[.]113[.]115[.]7/files/6691015685/lz2LW9N[.]exe hxxp://176[.]113[.]115[.]7/files/7684569444/advnrNo[.]exe |
Vidar |
| URL | hxxp://www[.]tatsunoichie[.]com/bw82/ hxxp://www[.]tdmmk[.]site/bw82/ hxxp://www[.]tesla-commercio[.]com/bw82/ hxxp://www[.]tiedcaps[.]rest/bw82/ hxxp://www[.]tncnn[.]com/bw82/ hxxp://www[.]trephone[.]art/bw82/ hxxp://www[.]whentime12[.]com/bw82/ hxxp://www[.]xn--gdask-y7a[.]com/bw82/ hxxp://www[.]xzaztlrl[.]icu/bw82/ hxxp://www[.]riquimbilis[.]com/bw82/ hxxp://www[.]roechling-roding[.]run/bw82/ hxxp://www[.]ruffstuffstore[.]com/bw82/ hxxp://www[.]sajjaddeveloper[.]com/bw82/ hxxp://www[.]sewythingy[.]com/bw82/ hxxp://www[.]shopjrock[.]com/bw82/ hxxp://www[.]stockandbarrell[.]com/bw82/ hxxp://www[.]sweetsasu[.]com/bw82/ hxxp://www[.]mousybusiness[.]com/bw82/ hxxp://www[.]nationalreturnday[.]com/bw82/ hxxp://www[.]neotactic[.]net/bw82/ hxxp://www[.]nocreditcarswestpalm[.]com/bw82/ hxxp://www[.]octoberx2[.]online/bw82/ hxxp://www[.]orchid-iris[.]com/bw82/ hxxp://www[.]owner[.]codes/bw82/ hxxp://www[.]packorganically[.]com/bw82/ hxxp://www[.]penislandbrews[.]com/bw82/ hxxp://www[.]prandartsagency[.]com/bw82/ hxxp://www[.]latinaexpres[.]com/bw82/ hxxp://www[.]mail-businessprinting[.]com/bw82/ hxxp://www[.]make-trends[.]com/bw82/ hxxp://www[.]mckarthylabscoe[.]com/bw82/ hxxp://www[.]mcwildwest[.]net/bw82/ hxxp://www[.]mercyvh[.]com/bw82/ hxxp://www[.]modernhomeskitchen[.]com/bw82/ hxxp://www[.]monnetier-mornex[.]com/bw82/ hxxp://www[.]mosterth[.]com/bw82/ hxxp://www[.]erraticer[.]com/bw82/ hxxp://www[.]evokingcalm[.]com/bw82/ hxxp://www[.]fjweiwang[.]com/bw82/ hxxp://www[.]free-outlet[.]com/bw82/ hxxp://www[.]friendsofhersheypa[.]com/bw82/ hxxp://www[.]greaterdiabetes[.]info/bw82/ hxxp://www[.]helptechservices[.]com/bw82/ hxxp://www[.]hjscinc[.]com/bw82/ hxxp://www[.]idealgaysex[.]com/bw82/ hxxp://www[.]justincook[.]xyz/bw82/ hxxp://www[.]beauskitchen[.]com/bw82/ hxxp://www[.]breakfastcandy[.]net/bw82/ hxxp://www[.]caffeinatedmamasblog[.]com/bw82/ hxxp://www[.]candleish[.]com/bw82/ hxxp://www[.]comminterbusiness[.]com/bw82/ hxxp://www[.]crispcleanbodyrituals[.]com/bw82/ hxxp://www[.]csgo-c4ses[.]com/bw82/ hxxp://www[.]dentonparalegals[.]com/bw82/ hxxp://www[.]devitasaude[.]com/bw82/ hxxp://www[.]downlooader[.]com/bw82/ hxxp://www[.]dreammakeloja[.]com/bw82/ hxxp://www[.]43414newportdr[.]com/bw82/ hxxp://www[.]78kanshu[.]net/bw82/ hxxp://www[.]aloharecords[.]com/bw82/ hxxp://www[.]amazonprim8[.]art/bw82/ hxxp://www[.]amq-studio[.]com/bw82/ hxxp://www[.]aplustd[.]com/bw82/ hxxp://www[.]artofsapna[.]com/bw82/ hxxp://www[.]bcheaptvwd[.]com/bw82/ hxxp://www[.]vdmo070[.]top/bopi/ hxxp://www[.]vegbydesign[.]net/et2d/ hxxp://www[.]vspectra[.]site/et2d/ hxxp://www[.]wcaconline[.]com/et2d/ hxxp://www[.]wevertexinc[.]com/et2d/ hxxp://www[.]window-replacement-60891[.]bond/bopi/ hxxp://www[.]work-abroad-30072[.]bond/bopi/ hxxp://www[.]yiugf[.]shop/bopi/ hxxp://www[.]zorahthyart[.]xyz/bopi/ hxxp://www[.]su-seikatu[.]info/et2d/ hxxp://www[.]texasrefinances[.]com/et2d/ hxxp://www[.]thelittleredcraftshack[.]com/et2d/ hxxp://www[.]tiktokmart[.]net/bopi/ hxxp://www[.]tilania[.]com/et2d/ hxxp://www[.]tp11okebet303[.]xyz/bopi/ hxxp://www[.]travelbackpackss[.]com/et2d/ hxxp://www[.]unempioymentpua[.]com/et2d/ hxxp://www[.]used-cars-58225[.]bond/bopi/ hxxp://www[.]sellmyhouseolympia[.]com/et2d/ hxxp://www[.]senashop[.]online/bopi/ hxxp://www[.]sloppyasians[.]com/et2d/ hxxp://www[.]smartphonesusapan[.]today/bopi/ hxxp://www[.]smile88[.]pro/bopi/ hxxp://www[.]solar-generator-52678[.]bond/bopi/ hxxp://www[.]solar-systems-panels-44596[.]bond/bopi/ hxxp://www[.]stratcte[.]shop/bopi/ hxxp://www[.]strictlyotaku[.]net/et2d/ hxxp://www[.]prestigehometransformations[.]com/et2d/ hxxp://www[.]protypepuggedpumpers[.]cloud/bopi/ hxxp://www[.]reapen[.]com/et2d/ hxxp://www[.]relaynext[.]services/bopi/ hxxp://www[.]rocket178click[.]click/bopi/ hxxp://www[.]rolexoff-watch[.]vip/bopi/ hxxp://www[.]russtybeats[.]com/et2d/ hxxp://www[.]sanctitude-cuspidated[.]com/et2d/ hxxp://www[.]securityacadamy[.]com/et2d/ hxxp://www[.]oggetto[.]xyz/bopi/ hxxp://www[.]online-advertising-64131[.]bond/bopi/ hxxp://www[.]online-advertising-96907[.]bond/bopi/ hxxp://www[.]online-dating-10276[.]bond/bopi/ hxxp://www[.]paradisepsychotherapy[.]net/bopi/ hxxp://www[.]pawchamamapet[.]net/et2d/ hxxp://www[.]pelikansubelesindeindirim[.]xyz/bopi/ hxxp://www[.]pilotsugardaddys[.]net/et2d/ hxxp://www[.]moutonneuropenihal[.]cloud/bopi/ hxxp://www[.]mybabysisterscloset[.]com/et2d/ hxxp://www[.]mysteryblack[.]com/et2d/ hxxp://www[.]ninetofivemama[.]com/et2d/ hxxp://www[.]nissicloud[.]com/et2d/ hxxp://www[.]niulorge[.]com/et2d/ hxxp://www[.]nursing-services-sa[.]click/bopi/ hxxp://www[.]office-space-26524[.]bond/bopi/ hxxp://www[.]lyfgyjxt[.]world/bopi/ hxxp://www[.]magentos6[.]com/et2d/ hxxp://www[.]manhe3[.]com/et2d/ hxxp://www[.]mechaf[.]com/et2d/ hxxp://www[.]media-cruise[.]com/et2d/ hxxp://www[.]mommabearmoney[.]com/et2d/ hxxp://www[.]monitoring-devices-79097[.]bond/bopi/ hxxp://www[.]mothersofmatriarchy[.]club/bopi/ hxxp://www[.]lailraw[.]com/et2d/ hxxp://www[.]lakewoodcharity[.]com/et2d/ hxxp://www[.]lilyamore[.]com/et2d/ hxxp://www[.]llink[.]net/bopi/ hxxp://www[.]loan-stalemate[.]info/et2d/ hxxp://www[.]lolydelapan[.]xyz/bopi/ hxxp://www[.]loud-media[.]net/bopi/ hxxp://www[.]lowdownlocal[.]com/et2d/ hxxp://www[.]it-jobs-11489[.]bond/bopi/ hxxp://www[.]jedzeniomat[.]com/et2d/ hxxp://www[.]jiangbozhibo[.]net/bopi/ hxxp://www[.]k978-k2bsp-mr[.]net/et2d/ hxxp://www[.]kayabrands[.]net/et2d/ hxxp://www[.]kforkidz[.]com/et2d/ hxxp://www[.]kissmanga[.]pro/et2d/ hxxp://www[.]klub8[.]vip/bopi/ hxxp://www[.]hellogringa[.]com/et2d/ hxxp://www[.]helniu[.]top/bopi/ hxxp://www[.]hiv-treatment-21144[.]bond/bopi/ hxxp://www[.]home-renovation-68987[.]bond/bopi/ hxxp://www[.]innerworkshops[.]love/et2d/ hxxp://www[.]interstateimaging[.]net/bopi/ hxxp://www[.]invest-eight[.]com/et2d/ hxxp://www[.]iran09[.]shop/bopi/ hxxp://www[.]forbrighterlife[.]com/et2d/ hxxp://www[.]furniture-76263[.]bond/bopi/ hxxp://www[.]gamefislot[.]xyz/bopi/ hxxp://www[.]gamepixel[.]xyz/bopi/ hxxp://www[.]gempharmatechllc[.]com/et2d/ hxxp://www[.]grooming-gigi[.]com/et2d/ hxxp://www[.]halsmart[.]info/et2d/ hxxp://www[.]hatiyhgsnterahs[.]com/et2d/ hxxp://www[.]dichvuviplike[.]pro/et2d/ hxxp://www[.]dutchesspistolpermit[.]com/et2d/ hxxp://www[.]egplek[.]net/bopi/ hxxp://www[.]emerm[.]autos/bopi/ hxxp://www[.]eratosantorini[.]com/et2d/ hxxp://www[.]essenciamoderna[.]store/bopi/ hxxp://www[.]essisoasesorias[.]com/et2d/ hxxp://www[.]ethgirls[.]xyz/bopi/ hxxp://www[.]fitdad[.]fitness/bopi/ hxxp://www[.]cleaning-services-99433[.]bond/bopi/ hxxp://www[.]cremation-services-63446[.]bond/bopi/ hxxp://www[.]danielortega[.]dev/bopi/ hxxp://www[.]danmerinc[.]com/et2d/ hxxp://www[.]deariededradekker[.]cloud/bopi/ hxxp://www[.]delishany[.]com/et2d/ hxxp://www[.]dibayadk[.]shop/bopi/ hxxp://www[.]dichvubangchuan[.]com/et2d/ hxxp://www[.]atmo[.]online/bopi/ hxxp://www[.]bgocni[.]info/bopi/ hxxp://www[.]bigiproperty[.]com/et2d/ hxxp://www[.]brandsincart[.]com/et2d/ hxxp://www[.]brazil920[.]com/et2d/ hxxp://www[.]cas100[.]com/et2d/ hxxp://www[.]casino-x-official-of6096[.]shop/bopi/ hxxp://www[.]cfa-cuu[.]com/et2d/ hxxp://www[.]cleanerkitchen-shop[.]com/et2d/ hxxp://www[.]age-spot-treatment-89993[.]bond/bopi/ hxxp://www[.]anahita-nl2[.]rest/bopi/ hxxp://www[.]anchorage-diels[.]net/bopi/ hxxp://www[.]ansomwareagile[.]shop/bopi/ hxxp://www[.]ao-m-nishinomiya[.]com/et2d/ hxxp://www[.]appalachianfx[.]com/et2d/ hxxp://www[.]appalachiangunrange[.]club/bopi/ hxxp://www[.]appkanal-web[.]biz/bopi/ hxxp://www[.]aralending[.]com/et2d/ hxxp://www[.]26166[.]vip/bopi/ hxxp://www[.]583846[.]com/et2d/ hxxp://www[.]affiliate-marketing-82505[.]bond/bopi/ hxxp://www[.]wedividebyzero[.]com/utau/ hxxp://www[.]wilmington[.]guide/utau/ hxxp://www[.]wisheskennel[.]com/utau/ hxxp://www[.]xdlbiyj[.]icu/utau/ hxxp://www[.]xinmotlanchet[.]online/utau/ hxxp://www[.]stranded[.]xyz/utau/ hxxp://www[.]surfboard-quarterly[.]com/utau/ hxxp://www[.]synchroport[.]com/utau/ hxxp://www[.]takeactionphysio[.]com/utau/ hxxp://www[.]taradiary[.]com/utau/ hxxp://www[.]thefriendsofmaryc[.]com/utau/ hxxp://www[.]thereseraulin[.]com/utau/ hxxp://www[.]thespiritualabolitionist[.]com/utau/ hxxp://www[.]thetruediversity[.]com/utau/ hxxp://www[.]towstate[.]com/utau/ hxxp://www[.]usjiikay[.]com/utau/ hxxp://www[.]myworldtwentyfourseven[.]com/utau/ hxxp://www[.]northacai[.]com/utau/ hxxp://www[.]nothingbeatsagreatstory[.]com/utau/ hxxp://www[.]pleasingpleasure[.]com/utau/ hxxp://www[.]qianwanshang[.]com/utau/ hxxp://www[.]querooo[.]com/utau/ hxxp://www[.]relliant-rehab[.]com/utau/ hxxp://www[.]shoppret[.]com/utau/ hxxp://www[.]sitokatachinhhang[.]club/utau/ hxxp://www[.]sohbetegelin[.]net/utau/ hxxp://www[.]sorelshopitalia[.]com/utau/ hxxp://www[.]juventudvq[.]com/utau/ hxxp://www[.]kamiapp[.]today/utau/ hxxp://www[.]losangeleslandscapedesigner[.]com/utau/ hxxp://www[.]mamentos[.]info/utau/ hxxp://www[.]meditationmateau[.]com/utau/ hxxp://www[.]meridianconversation[.]com/utau/ hxxp://www[.]meunegocioonlineoficial[.]com/utau/ hxxp://www[.]minnesotaunited[.]club/utau/ hxxp://www[.]mojhawaii[.]com/utau/ hxxp://www[.]monologuestudios[.]com/utau/ hxxp://www[.]finskills[.]net/utau/ hxxp://www[.]firstamm[.]com/utau/ hxxp://www[.]floridapremierestates[.]com/utau/ hxxp://www[.]foodloversdirect[.]com/utau/ hxxp://www[.]frenchtogether[.]info/utau/ hxxp://www[.]guoyijidian[.]com/utau/ hxxp://www[.]ilhadeitaparicatem[.]com/utau/ hxxp://www[.]intelligentinvestingtoday[.]com/utau/ hxxp://www[.]jjm68[.]com/utau/ hxxp://www[.]jlxrzz[.]com/utau/ hxxp://www[.]jutuiess[.]site/utau/ hxxp://www[.]bosphorusorthopedics[.]com/utau/ hxxp://www[.]bussinktransport[.]com/utau/ hxxp://www[.]content-trip[.]com/utau/ hxxp://www[.]coraltechnologygroup[.]com/utau/ hxxp://www[.]designantageuk[.]com/utau/ hxxp://www[.]emerald-creative[.]co[.]uk/utau/ hxxp://www[.]equityinengineering[.]com/utau/ hxxp://www[.]eurokidscreative[.]com/utau/ hxxp://www[.]exm-dronesecurity[.]online/utau/ hxxp://www[.]fiathfirst[.]com/utau/ hxxp://www[.]5sguy[.]com/utau/ hxxp://www[.]agroproducts[.]online/utau/ hxxp://www[.]ahmadhidayah[.]com/utau/ hxxp://www[.]atomoffice[.]asia/utau/ hxxp://www[.]bentrecfs[.]com/utau/ hxxp://www[.]beyondsauerkraut[.]com/utau/ hxxp://www[.]bolezi21[.]com/utau/ hxxp://176[.]65[.]144[.]3/host/steph[.]exe |
Formbook |
| URL | hxxp://mindoi05[.]top/download[.]php?file=lv[.]exe hxxp://mortos05[.]top/index[.]ph |
CryptBot |
| URL | hxxp://176[.]65[.]142[.]252/bins/morte[.]arm | Bashlite |
| URL | hxxp://176[.]113[.]115[.]7/files/newdef/apple[.]exe | Babadeda |
| URL | hxxps://arpobe[.]hemispheredrown[.]tech/ww_ee_hh_3439649453166363dc95741517459564[.]js hxxps://groundrats[.]org/tHHGGEDyAn6ygUcHwex98R1YlpAOQ9zvV2t6wfY5Sox hxxps://pdmfg[.]com/1q2w[.]js hxxps://pdmfg[.]com/js[.]php hxxps://phpmyadmin[.]artisticglassstudio[.]com/profileLayout hxxps://wccdefense[.]com/3e5t[.]js hxxps://wccdefense[.]com/js[.]php |
FAKEUPDATES |
| URL | hxxp://107[.]174[.]192[.]179/app/y0u3d_003[.]exe | DarkVision RAT |
| URL | hxxps://furnyso[.]ro/Meretrices[.]java hxxps://crix[.]ro/Irrepetant[.]pcx hxxps://crix[.]ro/RaPzCuuQxnu198[.]bin hxxps://nis[.]ycare[.]de/TEbhSnuiVehyuFWsrpGixzEWADYj152[.]bin hxxps://nis[.]ycare[.]de/Pladsbilletternes[.]msi hxxp://upandover[.]org/wp-content/Afledede33[.]lpk hxxps://ankaglobal[.]net/wp-admin/users/vNDRyTLoMFhqTDwmYb247[.]bin hxxps://ankaglobal[.]net/wp-admin/users/Resorberbar[.]ocx |
CloudEyE |
| URL | hxxps://api[.]telegram[.]org/bot7323823089:AAFBRsTW94zIpSoDS8yfGsotlQLqF2I6TU0/sendMessage?chat_id=5013849544 hxxps://api[.]telegram[.]org/bot7609353408:AAHVKIXrMIpRBNb_v5735NfKrW4Z4irdK8M/sendMessage?chat_id=2117893104 hxxps://api[.]telegram[.]org/bot7939905545:AAGZ8bMeWRWU5UEZdgj90fd6BDk9K4EMabA/sendMessage?chat_id=7000018009 hxxps://api[.]telegram[.]org/bot7807776547:AAEQ9EPh7pjMflp_PYTsGyRlC1NaAG5gzu8/sendMessage?chat_id=7352660815 hxxps://api[.]telegram[.]org/bot8190738970:AAHDKy-RjRSDn_rrrNASRNpb-wFunaqVjHY/sendMessage?chat_id=932962718 hxxp://144[.]91[.]92[.]251/12032025/p4zyiFB936QhnH0RjZLJ[.]txt hxxps://special-create-studio[.]com/snak/PO202503BE[.]bat hxxps://api[.]telegram[.]org/bot7757746098:AAFw7mTEqfCSeDOO3fwGgVRjN-ciGcuk2TE/sendMessage?chat_id=7730844083 hxxps://api[.]telegram[.]org/bot8140229817:AAFB_rWXLBYpG5y8YuqCM4jrhtrPOymstao/sendMessage?chat_id=7730844083 hxxps://api[.]telegram[.]org/bot7720966822:AAEDKrUlx5r9gfLmPGYoRjaYs8t6cOW3Mi0/sendMessage?chat_id=1166322455 hxxps://api[.]telegram[.]org/bot7725623378:AAFyPRXLgMaz6RepcrwiG-KkR7jNMc-SEgI/sendMessage?chat_id=5411784088 |
Snake Keylogger |
| URL | hxxp://172[.]245[.]208[.]13/web/wpc[.]js hxxp://172[.]245[.]208[.]13/web/we[.]exe |
AsyncRAT |
| URL | hxxp://176[.]65[.]142[.]161/f698bbaeef359c28[.]php | Stealc |
| URL | hxxp://196[.]251[.]85[.]80:18080/cb hxxp://196[.]251[.]85[.]80:18080/sl |
Pink |
| URL | hxxp://91[.]196[.]33[.]33/api/YTAsODYsODIsOWQsYTEsODgsOTAsOTUsNjUsN2Qs | SmartLoader |
| URL | hxxp://tfhoahegue[.]ru/s/ hxxp://tfhoahegue[.]su/s/ hxxp://xfhoahegue[.]ru/s/ hxxp://xfhoahegue[.]su/s/ hxxp://afhoahegue[.]ru/s/ hxxp://afhoahegue[.]su/s/ hxxp://efhoahegue[.]ru/s/ hxxp://efhoahegue[.]su/s/ hxxp://rfhoahegue[.]ru/s/ hxxp://rfhoahegue[.]su/s/ |
Phorpiex |
| URL | hxxp://bilighbohooll[.]ru/8/forum[.]php hxxp://eummentur[.]ru/8/forum[.]php hxxp://lielftworiss[.]com/8/forum[.]php |
Hancitor |
| URL | hxxp://46[.]8[.]226[.]196/scripts/4thepool_miner[.]sh | Coinminer |
| URL | hxxps://onlyfans[.]gift/folder/Fedora[.]bat | XWorm |
| URL | hxxp://62[.]133[.]61[.]254/Downloads/mytestfile[.]pdf[.]lnk hxxp://88[.]151[.]192[.]84/Downloads/%D0%A0%D0%B0%D1%85%D1%83%D0%BD%D0%BE%D0%BA[.]pdf[.]lnk |
Emmenhtal |
| URL | hxxp://195[.]82[.]146[.]34/888[.]exe | Glupteba |
