| Lokibot | secure01-redirect.net/gb29/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb26/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb21/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb28/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Colibri | 212.109.218.20/panel/login.php | 212.109.218.20 | 10-12-2021 |
| Oski | 103.147.185.68/k4/login.php | 103.147.185.68 | 10-12-2021 |
| Amadey | 185.215.113.118/fkwdoXScn2/login.php | 185.215.113.118 | 10-12-2021 |
| Matanbuchus | 193.56.146.61/GtHODfM/qilZw/ | 193.56.146.61 | 10-12-2021 |
| Matanbuchus | checkingupdatesoftware.at/GtHODfM/qilZw/ | 193.56.146.60 | 10-12-2021 |
| Lokibot | moneyfinders.xyz/cjay/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 10-12-2021 |
| Lokibot | hdmibonquet.ir/oge/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.183.45 | 10-12-2021 |
| Matanbuchus | 45.9.20.139/KtBruPvUNz/ | 45.9.20.139 | 10-12-2021 |
| Matanbuchus | checkupdate.at:63994/ktbrupvunz/ | 45.9.20.138 | 10-12-2021 |
| Matanbuchus | 45.9.20.136/KtBruPvUNz/ | 45.9.20.136 | 10-12-2021 |
| Matanbuchus | 45.9.20.137:63994/KtBruPvUNz/ | 45.9.20.137 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb22/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.199 | 10-12-2021 |
| Collector | 12.com.xsph.ru/ | 141.8.197.42 | 10-12-2021 |
| AgentTesla | 103.147.185.68/j/p20gj/login.php | 103.147.185.68 | 10-12-2021 |
| AgentTesla | afunshy.duckdns.org/login.php | 79.141.165.134 | 10-12-2021 |
| AgentTesla | zacwon.com/if/login.php | 47.74.91.126 | 10-12-2021 |
| Matanbuchus | belialw869367.at/GtHODfM/qilZw/ | 193.56.146.73 | 09-12-2021 |
| Matanbuchus | belialr878539.at/GtHODfM/qilZw/ | 193.56.146.75 | 09-12-2021 |
| Matanbuchus | belialp632298.at/GtHODfM/qilZw/ | 193.56.146.86 | 09-12-2021 |
| Zloader | 151.248.116.197/onion.php | 151.248.116.197 | 09-12-2021 |
| Matanbuchus | beliale232634.at/GtHODfM/qilZw/ | 193.56.146.74 | 09-12-2021 |