| AgentTesla |  www.mgbless.in/kolo/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/darl/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  mgbless.in/zion/login.php | 104.223.93.105 | 13-11-2021 |
| Collector |  sosi.ru.xsph.ru/ | 141.8.197.42 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/udok/login.php | 104.223.93.105 | 13-11-2021 |
| Collector |  f0598813.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Collector |  f0597176.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Amadey |  web.jsonpost.xyz/sj2vMs/login.php | 169.197.142.162 | 13-11-2021 |
| Collector |  f0595957.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Lokibot |  secure01-redirect.net/gb3/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Lokibot |  secure01-redirect.net/ga27/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Lokibot |  secure01-redirect.net/gb5/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Collector |  scamms.ru.xsph.ru/ | 141.8.197.42 | 12-11-2021 |
| Collector |  f0597070.xsph.ru/ | 141.8.193.236 | 12-11-2021 |
| Matanbuchus |  193.56.146.60/GtHODfM/qilZw/ | 193.56.146.60 | 11-11-2021 |
| Collector |  f0598195.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
| Oski |  pplonline.org/Cgi/login.php | 108.167.165.140 | 10-11-2021 |
| Collector |  f0595886.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
| Collector |  f0596863.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
| Collector |  managerpanel.com.xsph.ru/ | 141.8.197.42 | 10-11-2021 |
| Lokibot |  peakledz.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.158.42 | 10-11-2021 |
| Lokibot |  secure01-redirect.net/gb4/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 09-11-2021 |
| Colibri |  185.215.113.13/panel/login.php | 185.215.113.13 | 09-11-2021 |
| Collector |  f0596673.xsph.ru/ | 141.8.193.236 | 09-11-2021 |
| Collector |  f0597701.xsph.ru/ | 141.8.193.236 | 09-11-2021 |
