| Grandoreiro |  192.95.6.196/23112022new/autorizar.php | 192.95.6.196 | 03-12-2022 |
| BatLoader |  installationsoftware1.com/0ssdt1/index/login | 95.163.237.12 | 02-12-2022 |
| Aurora |  45.15.156.140/auth | 45.15.156.140 | 01-12-2022 |
| Lokibot |  julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Lokibot |  julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Amadey |  31.41.244.167/v7eWcjs/Login.php | 31.41.244.167 | 01-12-2022 |
| Lokibot |  208.67.105.161/k9/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.161 | 01-12-2022 |
| Collector |  45.137.64.40/ | 45.137.64.40 | 01-12-2022 |
| AgentTesla |  185.246.220.133/rone/login.php | 185.246.220.133 | 01-12-2022 |
| AgentTesla |  dropbuyinc.ga/xplor/login.php | 185.246.221.154 | 01-12-2022 |
| AgentTesla |  cletonmy.com/apos/login.php | 185.246.221.154 | 01-12-2022 |
| Lokibot |  telexmint.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.172.237 | 30-11-2022 |
| Lokibot |  binatbless.me/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.62.79 | 30-11-2022 |
| Lokibot |  tompsup.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.216.29 | 30-11-2022 |
| Aurora |  82.115.223.218/auth | 82.115.223.218 | 30-11-2022 |
| Aurora |  45.137.65.190/auth | 45.137.65.190 | 30-11-2022 |
| Aurora |  45.15.157.137/auth | 45.15.157.137 | 30-11-2022 |
| Aurora |  45.15.156.24/auth | 45.15.156.24 | 30-11-2022 |
| Aurora |  45.15.156.33/auth | 45.15.156.33 | 30-11-2022 |
| Aurora |  65.108.225.214/auth | 65.108.225.214 | 30-11-2022 |
| Aurora |  49.12.222.119/auth | 49.12.222.119 | 30-11-2022 |
| BatLoader |  grammarlycheck2.com/bc6w9o/index/login | 85.193.83.110 | 29-11-2022 |
| BatLoader |  installationupgrade6.com/0ssdt1/index/login | 83.222.8.68 | 29-11-2022 |
| Lokibot |  208.67.105.148/ser/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.148 | 29-11-2022 |
| Lokibot |  sedesadre.gq/PKZ/PWS/PvqDq929BSx_A_D_M1n_a.php | 141.98.6.102 | 29-11-2022 |
