| AgentTesla | 74.201.28.111/b0ss/login.php | 74.201.28.111 | 24-05-2022 |
| Oski | tvscreen.co.vu/login.php | 142.4.0.135 | 24-05-2022 |
| AgentTesla | 163.123.142.161/b0ss/login.php | 163.123.142.161 | 24-05-2022 |
| AgentTesla | 45.133.1.41/wsp/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla | 85.202.169.159/2tep/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla | 45.133.1.41/max/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla | 85.202.169.159/romas/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla | 45.133.1.41/jah/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla | 45.133.1.41/ony3/login.php | 45.133.1.41 | 21-05-2022 |
| AgentTesla | protoolschile.cl/wp-includes/finnee/login.php | 131.72.236.153 | 21-05-2022 |
| AgentTesla | 85.202.169.159/booch/login.php | 85.202.169.159 | 21-05-2022 |
| AgentTesla | 163.123.142.161/terhy/qc/login.php | 163.123.142.161 | 21-05-2022 |
| Collector | a0674105.xsph.ru/ | 141.8.192.93 | 19-05-2022 |
| Collector | zxcananas.ru.xsph.ru/ | 141.8.197.42 | 18-05-2022 |
| AgentTesla | 163.123.142.161/lunat/login.php | 163.123.142.161 | 18-05-2022 |
| BlackGuard | h163262.srv16.test-hf.su/panel/login.php | 91.227.16.16 | 18-05-2022 |
| Collector | a0653047.xsph.ru/ | 141.8.192.82 | 17-05-2022 |
| Mars | ida-ayu.com/panel/login.php | 104.21.28.128 | 17-05-2022 |
| Lokibot | goodservices.co.vu/damiano/five/PvqDq929BSx_A_D_M1n_a.php | 142.4.0.135 | 17-05-2022 |
| Pony | goodservices.co.vu/hcox/panel/admin.php | 142.4.0.135 | 17-05-2022 |
| Pony | goodservices.co.vu/netpro/panel/admin.php | 142.4.0.135 | 17-05-2022 |
| Matanbuchus | azure-dbupdate.at/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus | statsazure.xyz/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus | azure-updatedb.at/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |
| Matanbuchus | azuretelemetry.xyz/cAUtfkUDaptk/ZRSeiy/ | 34.88.62.135 | 17-05-2022 |