| Oski | 1advance.ddns.net/login.php | 34.93.40.105 | 25-11-2021 |
| Lokibot | secure01-redirect.net/gb15/PvqDq929BSx_A_D_M1n_a.php | 94.142.141.236 | 25-11-2021 |
| Collector | salees.ru/ | 31.31.198.62 | 25-11-2021 |
| Collector | f0589470.xsph.ru/ | 141.8.192.151 | 24-11-2021 |
| Cypress | f0602368.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 24-11-2021 |
| Collector | f0602593.xsph.ru/ | 141.8.193.236 | 24-11-2021 |
| Lokibot | secure01-redirect.net/gb7/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot | secure01-redirect.net/gb6/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot | secure01-redirect.net/ga26/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| AgentTesla | www.mgbless.in/dfran/login.php | 104.223.93.105 | 23-11-2021 |
| AgentTesla | www.mgbless.in/chibu/login.php | 104.223.93.105 | 23-11-2021 |
| Lokibot | oilproduce.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.171.239 | 23-11-2021 |
| Cypress | f0602061.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 23-11-2021 |
| AgentTesla | www.mgbless.in/zub/login.php | 104.223.93.105 | 22-11-2021 |
| AgentTesla | www.mgbless.in/onyi/login.php | 104.223.93.105 | 22-11-2021 |
| AgentTesla | mgbless.in/onyi/login.php | 104.223.93.105 | 22-11-2021 |
| Collector | f0602038.xsph.ru/ | 141.8.193.236 | 22-11-2021 |
| Collector | f0592852.xsph.ru/ | 141.8.193.236 | 22-11-2021 |
| Collector | cakezer.com.xsph.ru/ | 141.8.197.42 | 22-11-2021 |
| Oski | twinsoul.co.za/login.php | 196.41.130.163 | 22-11-2021 |
| Lokibot | bouquetltd.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.146.15 | 21-11-2021 |
| Lokibot | benera.xyz/bigdolls/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.65.138 | 21-11-2021 |
| Lokibot | secure01-redirect.net/fx/PvqDq929BSx_A_D_M1n_a.php | 87.249.53.24 | 21-11-2021 |
| Lokibot | doanlee.com/kiz/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 45.252.248.18 | 21-11-2021 |
| Lokibot | secure01-redirect.net/gb10/PvqDq929BSx_A_D_M1n_a.php | 45.8.127.147 | 20-11-2021 |