| Oski |  51.222.56.151/tsc/login.php | 51.222.56.151 | 12-06-2021 |
| Collector |  j3235254.myjino.ru/ | 217.107.34.191 | 12-06-2021 |
| Collector |  f0551090.xsph.ru/ | 141.8.192.151 | 11-06-2021 |
| Collector |  f0550934.xsph.ru/ | 141.8.193.236 | 10-06-2021 |
| Collector |  f0549925.xsph.ru/ | 141.8.192.151 | 10-06-2021 |
| Oski |  45.133.1.134/login.php | 45.133.1.134 | 10-06-2021 |
| AgentTesla |  www.threahingweath.com/login.php | 199.188.205.46 | 10-06-2021 |
| Amadey |  94.140.115.70/construction/login.php | 94.140.115.70 | 10-06-2021 |
| Collector |  f0550798.xsph.ru/ | 141.8.193.236 | 10-06-2021 |
| GrimAgent |  microsoftltdcorp.com.pl/login.php | 8.208.126.243 | 10-06-2021 |
| Zeus |  212.192.241.97/~botboyz/zs//cp.php?m=login | 212.192.241.97 | 10-06-2021 |
| EvilBear |  212.192.241.97/~matixcf/panel/login.php | 212.192.241.97 | 10-06-2021 |
| EvilBear |  212.192.241.97/~plexic/login.php | 212.192.241.97 | 10-06-2021 |
| LiteHTTP |  captinads.com/min4/login/ | 63.141.229.42 | 10-06-2021 |
| Collector |  a0549610.xsph.ru/ | 141.8.195.33 | 10-06-2021 |
| Oski |  212.192.241.91/login.php | 212.192.241.91 | 08-06-2021 |
| LiteHTTP |  captinads.com/min3/login/ | 67.211.219.228 | 07-06-2021 |
| LiteHTTP |  captinads.com/min/login/ | 67.211.219.228 | 07-06-2021 |
| Lokibot |  brokenpipes.ga/Bn4/PvqDq929BSx_A_D_M1n_a.php | 172.67.152.37 | 07-06-2021 |
| Collector |  f0549389.xsph.ru/ | 141.8.193.236 | 07-06-2021 |
| EvilBear |  matix.cf/panel/login.php | 212.192.241.97 | 07-06-2021 |
| Collector |  f0549248.xsph.ru/ | 141.8.192.151 | 07-06-2021 |
| Oski |  91.198.123.38/tsc/login.php | 91.198.123.38 | 07-06-2021 |
| Cypress |  cd05491.tmweb.ru/ | 185.114.247.102 | 07-06-2021 |
| LiteHTTP |  captinads.com/min2/login/ | 67.211.219.228 | 07-06-2021 |
