| Cypress |  f0602368.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 24-11-2021 |
| Collector |  f0602593.xsph.ru/ | 141.8.193.236 | 24-11-2021 |
| Lokibot |  secure01-redirect.net/gb7/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot |  secure01-redirect.net/gb6/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot |  secure01-redirect.net/ga26/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| AgentTesla |  www.mgbless.in/dfran/login.php | 104.223.93.105 | 23-11-2021 |
| AgentTesla |  www.mgbless.in/chibu/login.php | 104.223.93.105 | 23-11-2021 |
| Lokibot |  oilproduce.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.171.239 | 23-11-2021 |
| Cypress |  f0602061.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 23-11-2021 |
| AgentTesla |  www.mgbless.in/zub/login.php | 104.223.93.105 | 22-11-2021 |
| AgentTesla |  www.mgbless.in/onyi/login.php | 104.223.93.105 | 22-11-2021 |
| AgentTesla |  mgbless.in/onyi/login.php | 104.223.93.105 | 22-11-2021 |
| Collector |  f0602038.xsph.ru/ | 141.8.193.236 | 22-11-2021 |
| Collector |  f0592852.xsph.ru/ | 141.8.193.236 | 22-11-2021 |
| Collector |  cakezer.com.xsph.ru/ | 141.8.197.42 | 22-11-2021 |
| Oski |  twinsoul.co.za/login.php | 196.41.130.163 | 22-11-2021 |
| Lokibot |  bouquetltd.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.146.15 | 21-11-2021 |
| Lokibot |  benera.xyz/bigdolls/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.65.138 | 21-11-2021 |
| Lokibot |  secure01-redirect.net/fx/PvqDq929BSx_A_D_M1n_a.php | 87.249.53.24 | 21-11-2021 |
| Lokibot |  doanlee.com/kiz/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 45.252.248.18 | 21-11-2021 |
| Lokibot |  secure01-redirect.net/gb10/PvqDq929BSx_A_D_M1n_a.php | 45.8.127.147 | 20-11-2021 |
| Collector |  f0600797.xsph.ru/ | 141.8.193.236 | 20-11-2021 |
| AgentTesla |  fmg2.xyz/login.php | 172.67.197.140 | 20-11-2021 |
| Collector |  f0600246.xsph.ru/ | 141.8.193.236 | 19-11-2021 |
| Oski |  documentation.ddns.net/login.php | 34.64.234.145 | 19-11-2021 |
