| AgentTesla |  45.133.1.41/wsp/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla |  85.202.169.159/2tep/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla |  45.133.1.41/max/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla |  85.202.169.159/romas/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla |  45.133.1.41/jah/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla |  45.133.1.41/ony3/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla |  protoolschile.cl/wp-includes/finnee/login.php | 131.72.236.153 | 21-05-2022 |
| AgentTesla |  85.202.169.159/booch/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla |  163.123.142.161/terhy/qc/login.php | 163.123.142.161 | 21-05-2022 |
| Collector |  a0674105.xsph.ru/ | 141.8.192.93 | 19-05-2022 |
| Collector |  zxcananas.ru.xsph.ru/ | 141.8.197.42 | 18-05-2022 |
| AgentTesla |  163.123.142.161/lunat/login.php | 163.123.142.161 | 18-05-2022 |
| BlackGuard |  h163262.srv16.test-hf.su/panel/login.php | 91.227.16.16 | 18-05-2022 |
| Collector |  a0653047.xsph.ru/ | 141.8.192.82 | 17-05-2022 |
| Mars |  ida-ayu.com/panel/login.php | 104.21.28.128 | 17-05-2022 |
| Lokibot |  goodservices.co.vu/damiano/five/PvqDq929BSx_A_D_M1n_a.php | 142.4.0.135 | 17-05-2022 |
| Pony |  goodservices.co.vu/hcox/panel/admin.php | 142.4.0.135 | 17-05-2022 |
| Pony |  goodservices.co.vu/netpro/panel/admin.php | 142.4.0.135 | 17-05-2022 |
| Matanbuchus |  azure-dbupdate.at/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus |  statsazure.xyz/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus |  azure-updatedb.at/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus |  azuretelemetry.xyz/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Oski |  unitech.co.vu/login.php | 142.4.0.135 | 16-05-2022 |
| Collector |  f0658013.xsph.ru/ | 141.8.192.151 | 16-05-2022 |
| Collector |  a0672873.xsph.ru/ | 141.8.192.31 | 16-05-2022 |
