| Lokibot | sempersim.su/gm12/PvqDq929BSx_A_D_M1n_a.php | 109.206.243.141 | 05-12-2022 |
| Amadey | 62.204.41.6/p9cWxH/Login.php | 62.204.41.6 | 03-12-2022 |
| Collector | kodeinri.beget.tech/ | 87.236.19.211 | 03-12-2022 |
| Grandoreiro | 185.191.228.227/autorizar.php | 185.191.228.227 | 03-12-2022 |
| Grandoreiro | 192.95.6.196/23112022new/autorizar.php | 192.95.6.196 | 03-12-2022 |
| BatLoader | installationsoftware1.com/0ssdt1/index/login | 95.163.237.12 | 02-12-2022 |
| Aurora | 45.15.156.140/auth | 45.15.156.140 | 01-12-2022 |
| Lokibot | julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Lokibot | julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php | 172.64.80.1 | 01-12-2022 |
| Amadey | 31.41.244.167/v7eWcjs/Login.php | 31.41.244.167 | 01-12-2022 |
| Lokibot | 208.67.105.161/k9/five/PvqDq929BSx_A_D_M1n_a.php | 208.67.105.161 | 01-12-2022 |
| Collector | 45.137.64.40/ | 45.137.64.40 | 01-12-2022 |
| AgentTesla | 185.246.220.133/rone/login.php | 185.246.220.133 | 01-12-2022 |
| AgentTesla | dropbuyinc.ga/xplor/login.php | 185.246.221.154 | 01-12-2022 |
| AgentTesla | cletonmy.com/apos/login.php | 185.246.221.154 | 01-12-2022 |
| Lokibot | telexmint.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.172.237 | 30-11-2022 |
| Lokibot | binatbless.me/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.62.79 | 30-11-2022 |
| Lokibot | tompsup.me/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.216.29 | 30-11-2022 |
| Aurora | 82.115.223.218/auth | 82.115.223.218 | 30-11-2022 |
| Aurora | 45.137.65.190/auth | 45.137.65.190 | 30-11-2022 |
| Aurora | 45.15.157.137/auth | 45.15.157.137 | 30-11-2022 |
| Aurora | 45.15.156.24/auth | 45.15.156.24 | 30-11-2022 |
| Aurora | 45.15.156.33/auth | 45.15.156.33 | 30-11-2022 |
| Aurora | 65.108.225.214/auth | 65.108.225.214 | 30-11-2022 |
| Aurora | 49.12.222.119/auth | 49.12.222.119 | 30-11-2022 |