| AgentTesla |  cletonmy.com/apos/login.php | 185.246.221.154 | 01-12-2022 |
| Lokibot |  telexmint.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.172.237 | 30-11-2022 |
| Lokibot |  binatbless.me/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.62.79 | 30-11-2022 |
| Lokibot |  tompsup.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.216.29 | 30-11-2022 |
| Aurora |  82.115.223.218/auth | 82.115.223.218 | 30-11-2022 |
| Aurora |  45.137.65.190/auth | 45.137.65.190 | 30-11-2022 |
| Aurora |  45.15.157.137/auth | 45.15.157.137 | 30-11-2022 |
| Aurora |  45.15.156.24/auth | 45.15.156.24 | 30-11-2022 |
| Aurora |  45.15.156.33/auth | 45.15.156.33 | 30-11-2022 |
| Aurora |  65.108.225.214/auth | 65.108.225.214 | 30-11-2022 |
| Aurora |  49.12.222.119/auth | 49.12.222.119 | 30-11-2022 |
| BatLoader |  grammarlycheck2.com/bc6w9o/index/login | 85.193.83.110 | 29-11-2022 |
| BatLoader |  installationupgrade6.com/0ssdt1/index/login | 83.222.8.68 | 29-11-2022 |
| Lokibot |  208.67.105.148/ser/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.148 | 29-11-2022 |
| Lokibot |  sedesadre.gq/PKZ/PWS/PvqDq929BSx_A_D_M1n_a.php | 141.98.6.102 | 29-11-2022 |
| Lilith |  31.13.195.81:4545/login | 31.13.195.81 | 29-11-2022 |
| Lokibot |  208.67.105.161/gk2/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.161 | 29-11-2022 |
| Amadey |  77.73.133.72/hfk3vK9/Login.php | 77.73.133.72 | 29-11-2022 |
| Lokibot |  sempersim.su/gm15/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.202 | 29-11-2022 |
| Mars |  data.topababa.com/panel/login.php | 157.230.93.107 | 29-11-2022 |
| Lokibot |  cantebo.buzz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.184.213 | 29-11-2022 |
| Amadey |  62.204.41.252/nB8cWack3/Login.php | 62.204.41.252 | 29-11-2022 |
| Lokibot |  208.67.105.162/soft/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.162 | 29-11-2022 |
| Lokibot |  sempersim.su/gm18/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.202 | 28-11-2022 |
| Lokibot |  sempersim.su/gm17/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.202 | 28-11-2022 |
