| Aurora |  185.106.93.245/auth | 185.106.93.245 | 07-12-2022 |
| Aurora |  135.181.197.26/auth | 135.181.197.26 | 07-12-2022 |
| Aurora |  185.17.0.138/auth | 185.17.0.138 | 07-12-2022 |
| Aurora |  80.92.204.59/auth | 80.92.204.59 | 07-12-2022 |
| Aurora |  82.115.223.138/auth | 82.115.223.138 | 07-12-2022 |
| Aurora |  185.239.239.194/auth | 185.239.239.194 | 07-12-2022 |
| ModernLoader |  62.204.41.235/AVA/ | 62.204.41.235 | 07-12-2022 |
| Lokibot |  sempersim.su/gm12/PvqDq929BSx_A_D_M1n_a.php | 109.206.243.141 | 05-12-2022 |
| Amadey |  62.204.41.6/p9cWxH/Login.php | 62.204.41.6 | 03-12-2022 |
| Collector |  kodeinri.beget.tech/ | 87.236.19.211 | 03-12-2022 |
| Grandoreiro |  185.191.228.227/autorizar.php | 185.191.228.227 | 03-12-2022 |
| Grandoreiro |  192.95.6.196/23112022new/autorizar.php | 192.95.6.196 | 03-12-2022 |
| BatLoader |  installationsoftware1.com/0ssdt1/index/login | 95.163.237.12 | 02-12-2022 |
| Aurora |  45.15.156.140/auth | 45.15.156.140 | 01-12-2022 |
| Lokibot |  julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Lokibot |  julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Amadey |  31.41.244.167/v7eWcjs/Login.php | 31.41.244.167 | 01-12-2022 |
| Lokibot |  208.67.105.161/k9/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.161 | 01-12-2022 |
| Collector |  45.137.64.40/ | 45.137.64.40 | 01-12-2022 |
| AgentTesla |  185.246.220.133/rone/login.php | 185.246.220.133 | 01-12-2022 |
| AgentTesla |  dropbuyinc.ga/xplor/login.php | 185.246.221.154 | 01-12-2022 |
| AgentTesla |  cletonmy.com/apos/login.php | 185.246.221.154 | 01-12-2022 |
| Lokibot |  telexmint.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.172.237 | 30-11-2022 |
| Lokibot |  binatbless.me/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.62.79 | 30-11-2022 |
| Lokibot |  tompsup.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.216.29 | 30-11-2022 |
