| AgentTesla | ophtalmiccenter.com/origin/webpanel/login.php | 69.167.175.226 | 18-04-2020 |
| Oski | 91.245.227.32/login.php | 91.245.227.32 | 18-04-2020 |
| Oski | ratuinopurene.pw/login.php | 194.87.235.183 | 18-04-2020 |
| Oski | reteropitano.pw/login.php | 45.141.101.4 | 18-04-2020 |
| MajikPOS | 46.161.27.57/northon/ | 46.161.27.57 | 18-04-2020 |
| Lokibot | mahetechasia.com/draw/five/PvqDq929BSx_A_D_M1n_a.php | 194.116.162.144 | 18-04-2020 |
| Lokibot | mahetechasia.com/dabs/five/PvqDq929BSx_A_D_M1n_a.php | 194.116.162.144 | 18-04-2020 |
| BlackNet | f0428648.xsph.ru/login.php | 141.8.193.236 | 18-04-2020 |
| Predator | www.f0427701.xsph.ru/login | 141.8.193.236 | 18-04-2020 |
| Azorult | hvhboss.000webhostapp.com/panel/admin.php | 145.14.145.91 | 17-04-2020 |
| Lokibot | rnarport.com/deal/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | mahetechasia.com/drug/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | rnarport.com/duck/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | rnarport.com/dull/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | taruntextlies.com/cage/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | mahetechasia.com/didi/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | taruntextlies.com/clean/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Lokibot | taruntextlies.com/cutter/five/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.54 | 17-04-2020 |
| Predator | f0428629.xsph.ru/login | 141.8.193.236 | 17-04-2020 |
| Lokibot | mahetechasia.com/data/five/PvqDq929BSx_A_D_M1n_a.php | 2.57.184.214 | 17-04-2020 |
| ParasiteHTTP | 86.106.142.107:8055/bot/login/ | 86.106.142.107 | 16-04-2020 |
| BlackNet | f0428648.xsph.ru//login.php | 141.8.193.236 | 16-04-2020 |
| Predator | f0427701.xsph.ru/login | 141.8.193.236 | 16-04-2020 |
| DiamondFox | 217.8.117.60/mh/index.php | 217.8.117.60 | 16-04-2020 |
| Lokibot | danagupal.com/wp-includes/ghy/PvqDq929BSx_A_D_M1n_a.php | 185.159.153.129 | 16-04-2020 |