4,162 DGA/Khalesi/DGALIST-Khalesi.txt
View file

Large diffs are not rendered by default.

33,884 DGA/Mylobot/DGALIST-Mylobot.txt
View file

Large diffs are not rendered by default.

82 DGA/Phorpiex/DGALIST-Phorpiex.txt
View file
@@ -1,45 +1,45 @@
#name first_seen last_seen
aaeuauaueieiier.su 2021-01-25 2022-01-06
aeaunengieisiag.su 2021-01-25 2022-01-06
aeigeibfabidbgu.su 2021-01-25 2022-01-06
ahefihaehiuguus.su 2021-01-25 2022-01-06
ahoouhrghsudmfg.su 2021-01-25 2022-01-06
azbdezaeugnungg.su 2021-01-25 2022-01-06
babiuedunefbbgg.su 2021-01-25 2022-01-06
bidjcceaiidjieg.su 2021-01-25 2022-01-06
eaeunauenuangdg.su 2021-01-25 2022-01-06
eahaiuhuirsuhfg.su 2021-01-25 2022-01-06
eiugaidihehuhfs.su 2021-01-25 2022-01-06
eunuegnuaebuang.su 2021-01-25 2022-01-06
ezeiafzbgzabzdg.su 2021-01-25 2022-01-06
gaieufhaefuefhg.su 2021-01-25 2022-01-06
gaubaduebdubegu.su 2021-01-25 2022-01-06
giaigduaedhhush.su 2021-01-25 2022-01-06
hioeppaepgoaneg.su 2021-01-25 2022-01-06
hisrfsosrughudh.su 2021-01-25 2022-01-06
ibbgursuiuedeeg.su 2021-01-25 2022-01-06
ibieibfiubefudg.su 2021-01-25 2022-01-06
ieanubfiuagugng.su 2021-01-25 2022-01-06
iinnfuaeidaighg.su 2021-01-25 2022-01-06
isohgohrusurgdg.su 2021-01-25 2022-01-06
iuauebfeufuuasg.su 2021-01-25 2022-01-06
iuebfiueifuitog.su 2021-01-25 2022-01-06
iuehuhaethhtudg.su 2021-01-25 2022-01-06
iuhuefibuibgbsg.su 2021-01-25 2022-01-06
lpekfoaefhiehug.su 2021-01-25 2022-01-06
ngsiososusdiifi.su 2021-01-25 2022-01-06
niemfoefomsegig.su 2021-01-25 2022-01-06
nifaneieugunuug.su 2021-01-25 2022-01-06
nniaendiandiihg.su 2021-01-25 2022-01-06
oaoeuoouegandsg.su 2021-01-25 2022-01-06
pojoieaohauubfg.su 2021-01-25 2022-01-06
rutuneuenfuhusg.su 2021-01-25 2022-01-06
sogounfsungunrg.su 2021-01-25 2022-01-06
ubanedanigmimig.su 2021-01-25 2022-01-06
ueinaieugnusfig.su 2021-01-25 2022-01-06
uhiueaaubgbuadg.su 2021-01-25 2022-01-06
uniunieubfiubgg.su 2021-01-25 2022-01-06
uririneinigning.su 2021-01-25 2022-01-06
aaeuauaueieiier.su 2021-01-25 2022-01-07
aeaunengieisiag.su 2021-01-25 2022-01-07
aeigeibfabidbgu.su 2021-01-25 2022-01-07
ahefihaehiuguus.su 2021-01-25 2022-01-07
ahoouhrghsudmfg.su 2021-01-25 2022-01-07
azbdezaeugnungg.su 2021-01-25 2022-01-07
babiuedunefbbgg.su 2021-01-25 2022-01-07
bidjcceaiidjieg.su 2021-01-25 2022-01-07
eaeunauenuangdg.su 2021-01-25 2022-01-07
eahaiuhuirsuhfg.su 2021-01-25 2022-01-07
eiugaidihehuhfs.su 2021-01-25 2022-01-07
eunuegnuaebuang.su 2021-01-25 2022-01-07
ezeiafzbgzabzdg.su 2021-01-25 2022-01-07
gaieufhaefuefhg.su 2021-01-25 2022-01-07
gaubaduebdubegu.su 2021-01-25 2022-01-07
giaigduaedhhush.su 2021-01-25 2022-01-07
hioeppaepgoaneg.su 2021-01-25 2022-01-07
hisrfsosrughudh.su 2021-01-25 2022-01-07
ibbgursuiuedeeg.su 2021-01-25 2022-01-07
ibieibfiubefudg.su 2021-01-25 2022-01-07
ieanubfiuagugng.su 2021-01-25 2022-01-07
iinnfuaeidaighg.su 2021-01-25 2022-01-07
isohgohrusurgdg.su 2021-01-25 2022-01-07
iuauebfeufuuasg.su 2021-01-25 2022-01-07
iuebfiueifuitog.su 2021-01-25 2022-01-07
iuehuhaethhtudg.su 2021-01-25 2022-01-07
iuhuefibuibgbsg.su 2021-01-25 2022-01-07
lpekfoaefhiehug.su 2021-01-25 2022-01-07
ngsiososusdiifi.su 2021-01-25 2022-01-07
niemfoefomsegig.su 2021-01-25 2022-01-07
nifaneieugunuug.su 2021-01-25 2022-01-07
nniaendiandiihg.su 2021-01-25 2022-01-07
oaoeuoouegandsg.su 2021-01-25 2022-01-07
pojoieaohauubfg.su 2021-01-25 2022-01-07
rutuneuenfuhusg.su 2021-01-25 2022-01-07
sogounfsungunrg.su 2021-01-25 2022-01-07
ubanedanigmimig.su 2021-01-25 2022-01-07
ueinaieugnusfig.su 2021-01-25 2022-01-07
uhiueaaubgbuadg.su 2021-01-25 2022-01-07
uniunieubfiubgg.su 2021-01-25 2022-01-07
uririneinigning.su 2021-01-25 2022-01-07
sadbabbabefnefmf.ru 2021-12-29 2021-12-31
eadbabbabefnefmf.top 2021-08-11 2021-12-31
eaedvezdeahfhuea.top 2021-08-11 2021-12-31
157 DGA/Tofsee/DGALIST-Tofsee.txt
View file
@@ -1,4 +1,43 @@
#name first_seen last_seen
dufdufg.ch 2022-01-07 2022-01-07
dugdugc.ch 2022-01-07 2022-01-07
duqduqb.ch 2022-01-07 2022-01-07
duvduva.biz 2022-01-07 2022-01-07
dvddvdb.biz 2022-01-07 2022-01-07
dvhdvha.biz 2022-01-07 2022-01-07
dvkdvki.ch 2022-01-07 2022-01-07
dvqdvqd.biz 2022-01-07 2022-01-07
dvrdvrh.ch 2022-01-07 2022-01-07
dwndwnf.biz 2022-01-07 2022-01-07
dwodwoe.biz 2022-01-07 2022-01-07
dxqdxqe.ch 2022-01-07 2022-01-07
dxxdxxi.biz 2022-01-07 2022-01-07
dxzdxzd.ch 2022-01-07 2022-01-07
dyadyae.biz 2022-01-07 2022-01-07
dyhdyhi.ch 2022-01-07 2022-01-07
xboxbox.biz 2022-01-07 2022-01-07
eakeaka.biz 2022-01-06 2022-01-07
eakeaka.ch 2022-01-06 2022-01-07
eakeakb.biz 2022-01-06 2022-01-07
eakeakb.ch 2022-01-06 2022-01-07
eakeakc.biz 2022-01-06 2022-01-07
eakeakc.ch 2022-01-06 2022-01-07
eakeakd.biz 2022-01-06 2022-01-07
eakeakd.ch 2022-01-06 2022-01-07
eakeake.biz 2022-01-06 2022-01-07
eakeake.ch 2022-01-06 2022-01-07
eakeakf.biz 2022-01-06 2022-01-07
eakeakf.ch 2022-01-06 2022-01-07
eakeakg.biz 2022-01-06 2022-01-07
eakeakg.ch 2022-01-06 2022-01-07
eakeakh.biz 2022-01-06 2022-01-07
eakeakh.ch 2022-01-06 2022-01-07
eakeaki.biz 2022-01-06 2022-01-07
eakeaki.ch 2022-01-06 2022-01-07
eakeakj.biz 2022-01-06 2022-01-07
eakeakj.ch 2022-01-06 2022-01-07
duwduwh.ch 2022-01-05 2022-01-07
dwsdwse.biz 2022-01-05 2022-01-07
dundunc.biz 2022-01-06 2022-01-06
duqduqd.ch 2022-01-06 2022-01-06
duuduug.ch 2022-01-06 2022-01-06
@@ -16,41 +55,20 @@ dxkdxkb.biz 2022-01-06 2022-01-06
dxzdxzi.ch 2022-01-06 2022-01-06
dybdybi.ch 2022-01-06 2022-01-06
dyddydc.ch 2022-01-06 2022-01-06
dyedyeb.ch 2022-01-06 2022-01-06
dyhdyhe.ch 2022-01-06 2022-01-06
eakeaka.biz 2022-01-06 2022-01-06
eakeaka.ch 2022-01-06 2022-01-06
eakeakb.biz 2022-01-06 2022-01-06
eakeakb.ch 2022-01-06 2022-01-06
eakeakc.biz 2022-01-06 2022-01-06
eakeakc.ch 2022-01-06 2022-01-06
eakeakd.biz 2022-01-06 2022-01-06
eakeakd.ch 2022-01-06 2022-01-06
eakeake.biz 2022-01-06 2022-01-06
eakeake.ch 2022-01-06 2022-01-06
eakeakf.biz 2022-01-06 2022-01-06
eakeakf.ch 2022-01-06 2022-01-06
eakeakg.biz 2022-01-06 2022-01-06
eakeakg.ch 2022-01-06 2022-01-06
eakeakh.biz 2022-01-06 2022-01-06
eakeakh.ch 2022-01-06 2022-01-06
eakeaki.biz 2022-01-06 2022-01-06
eakeaki.ch 2022-01-06 2022-01-06
eakeakj.biz 2022-01-06 2022-01-06
eakeakj.ch 2022-01-06 2022-01-06
dyjdyjf.ch 2022-01-04 2022-01-06
dwrdwrj.ch 2022-01-03 2022-01-06
dyedyeb.ch 2022-01-01 2022-01-06
dugdugi.ch 2022-01-05 2022-01-05
duiduig.ch 2022-01-05 2022-01-05
durdurf.biz 2022-01-05 2022-01-05
duwduwh.ch 2022-01-05 2022-01-05
dvhdvhb.biz 2022-01-05 2022-01-05
dwodwof.ch 2022-01-05 2022-01-05
dwqdwqa.biz 2022-01-05 2022-01-05
dwrdwra.biz 2022-01-05 2022-01-05
dwsdwsc.biz 2022-01-05 2022-01-05
dwsdwsd.biz 2022-01-05 2022-01-05
dwsdwse.biz 2022-01-05 2022-01-05
dwtdwtg.biz 2022-01-05 2022-01-05
dwudwui.ch 2022-01-05 2022-01-05
dwvdwvj.ch 2022-01-05 2022-01-05
dwwdwwh.ch 2022-01-05 2022-01-05
@@ -75,13 +93,15 @@ dxsdxsg.biz 2022-01-05 2022-01-05
dxsdxsj.biz 2022-01-05 2022-01-05
dxtdxte.ch 2022-01-05 2022-01-05
dxtdxth.biz 2022-01-05 2022-01-05
dxwdxwf.biz 2022-01-05 2022-01-05
dxydxyc.biz 2022-01-05 2022-01-05
dxydxyg.biz 2022-01-05 2022-01-05
dxydxyi.biz 2022-01-05 2022-01-05
dxzdxze.ch 2022-01-05 2022-01-05
dxzdxzf.biz 2022-01-05 2022-01-05
dxzdxzf.ch 2022-01-05 2022-01-05
dybdyba.biz 2022-01-05 2022-01-05
dycdycd.ch 2022-01-05 2022-01-05
dyddydh.ch 2022-01-05 2022-01-05
dygdygj.ch 2022-01-05 2022-01-05
dyhdyhd.ch 2022-01-05 2022-01-05
@@ -99,29 +119,26 @@ dysdysj.biz 2022-01-05 2022-01-05
dzddzdb.biz 2022-01-05 2022-01-05
dzedzee.biz 2022-01-05 2022-01-05
dxvdxvj.ch 2022-01-04 2022-01-05
dwtdwtg.biz 2022-01-01 2022-01-05
dxwdxwf.biz 2022-01-01 2022-01-05
dycdycd.ch 2022-01-01 2022-01-05
eajeaja.biz 2022-01-01 2022-01-05
eajeaja.ch 2022-01-01 2022-01-05
eajeajb.biz 2022-01-01 2022-01-05
eajeajb.ch 2022-01-01 2022-01-05
eajeajc.biz 2022-01-01 2022-01-05
eajeajc.ch 2022-01-01 2022-01-05
eajeajd.biz 2022-01-01 2022-01-05
eajeajd.ch 2022-01-01 2022-01-05
eajeaje.biz 2022-01-01 2022-01-05
eajeaje.ch 2022-01-01 2022-01-05
eajeajf.biz 2022-01-01 2022-01-05
eajeajf.ch 2022-01-01 2022-01-05
eajeajg.biz 2022-01-01 2022-01-05
eajeajg.ch 2022-01-01 2022-01-05
eajeajh.biz 2022-01-01 2022-01-05
eajeajh.ch 2022-01-01 2022-01-05
eajeaji.biz 2022-01-01 2022-01-05
eajeaji.ch 2022-01-01 2022-01-05
eajeajj.biz 2022-01-01 2022-01-05
eajeajj.ch 2022-01-01 2022-01-05
eajeaja.biz 2022-01-02 2022-01-05
eajeaja.ch 2022-01-02 2022-01-05
eajeajb.biz 2022-01-02 2022-01-05
eajeajb.ch 2022-01-02 2022-01-05
eajeajc.biz 2022-01-02 2022-01-05
eajeajc.ch 2022-01-02 2022-01-05
eajeajd.biz 2022-01-02 2022-01-05
eajeajd.ch 2022-01-02 2022-01-05
eajeaje.biz 2022-01-02 2022-01-05
eajeaje.ch 2022-01-02 2022-01-05
eajeajf.biz 2022-01-02 2022-01-05
eajeajf.ch 2022-01-02 2022-01-05
eajeajg.biz 2022-01-02 2022-01-05
eajeajg.ch 2022-01-02 2022-01-05
eajeajh.biz 2022-01-02 2022-01-05
eajeajh.ch 2022-01-02 2022-01-05
eajeaji.biz 2022-01-02 2022-01-05
eajeaji.ch 2022-01-02 2022-01-05
eajeajj.biz 2022-01-02 2022-01-05
eajeajj.ch 2022-01-02 2022-01-05
dugdugb.ch 2022-01-04 2022-01-04
duhduhb.biz 2022-01-04 2022-01-04
dukdukd.ch 2022-01-04 2022-01-04
@@ -137,6 +154,7 @@ dwsdwsa.biz 2022-01-04 2022-01-04
dwsdwsh.biz 2022-01-04 2022-01-04
dwtdwtj.biz 2022-01-04 2022-01-04
dwudwuh.ch 2022-01-04 2022-01-04
dwudwui.biz 2022-01-04 2022-01-04
dwwdwwe.biz 2022-01-04 2022-01-04
dwxdwxb.biz 2022-01-04 2022-01-04
dwydwye.ch 2022-01-04 2022-01-04
@@ -197,7 +215,6 @@ dyudyud.ch 2022-01-04 2022-01-04
dywdywf.biz 2022-01-04 2022-01-04
dzddzda.ch 2022-01-04 2022-01-04
dzedzec.biz 2022-01-04 2022-01-04
dwudwui.biz 2022-01-01 2022-01-04
4444444.biz 2022-01-03 2022-01-03
dumdumi.ch 2022-01-03 2022-01-03
dunduni.ch 2022-01-03 2022-01-03
@@ -228,49 +245,3 @@ dxtdxtj.biz 2022-01-02 2022-01-02
dxudxub.biz 2022-01-02 2022-01-02
dxwdxwd.ch 2022-01-02 2022-01-02
kankanw.biz 2022-01-02 2022-01-02
dugdugd.ch 2022-01-01 2022-01-01
dugdugf.biz 2022-01-01 2022-01-01
dusdusf.ch 2022-01-01 2022-01-01
duuduua.biz 2022-01-01 2022-01-01
duuduub.ch 2022-01-01 2022-01-01
duuduue.biz 2022-01-01 2022-01-01
duvduvb.biz 2022-01-01 2022-01-01
dwmdwmb.ch 2022-01-01 2022-01-01
dwpdwpg.biz 2022-01-01 2022-01-01
dwrdwri.biz 2022-01-01 2022-01-01
dwsdwsh.ch 2022-01-01 2022-01-01
dwtdwtf.ch 2022-01-01 2022-01-01
dwvdwvf.biz 2022-01-01 2022-01-01
dwvdwvf.ch 2022-01-01 2022-01-01
dwwdwwj.biz 2022-01-01 2022-01-01
dwxdwxd.biz 2022-01-01 2022-01-01
dxadxaa.biz 2022-01-01 2022-01-01
dxadxad.ch 2022-01-01 2022-01-01
dxbdxbb.ch 2022-01-01 2022-01-01
dxgdxgh.biz 2022-01-01 2022-01-01
dxkdxkh.biz 2022-01-01 2022-01-01
dxldxlj.biz 2022-01-01 2022-01-01
dxodxoh.biz 2022-01-01 2022-01-01
dxodxoj.biz 2022-01-01 2022-01-01
dxpdxpc.biz 2022-01-01 2022-01-01
dxrdxrh.ch 2022-01-01 2022-01-01
dxsdxsf.biz 2022-01-01 2022-01-01
dxtdxte.biz 2022-01-01 2022-01-01
dxudxuf.biz 2022-01-01 2022-01-01
dxxdxxf.ch 2022-01-01 2022-01-01
dxzdxzh.biz 2022-01-01 2022-01-01
dybdybc.biz 2022-01-01 2022-01-01
dycdycf.ch 2022-01-01 2022-01-01
dyddydh.biz 2022-01-01 2022-01-01
dyfdyfa.biz 2022-01-01 2022-01-01
dyfdyff.biz 2022-01-01 2022-01-01
dygdygc.ch 2022-01-01 2022-01-01
dygdygi.biz 2022-01-01 2022-01-01
dyjdyjd.biz 2022-01-01 2022-01-01
dykdyki.biz 2022-01-01 2022-01-01
dyodyoc.biz 2022-01-01 2022-01-01
dyrdyrc.biz 2022-01-01 2022-01-01
dyrdyrh.biz 2022-01-01 2022-01-01
dyudyuf.biz 2022-01-01 2022-01-01
dywdywh.biz 2022-01-01 2022-01-01
dzedzec.ch 2022-01-01 2022-01-01
794 DGA/unclassified/2021-12-07-DGALIST-03B3BDA3883CE0AA5BDACE933800AF51.txt
View file

This file was deleted.

16,186 DGA/unclassified/2021-12-07-DGALIST-5975D26327BD8AB10D2202B59F8F99CA.txt
View file

This file was deleted.

16 DGA/unclassified/2021-12-07-DGALIST-873C6D18C438662D184B1007F975D6C7.txt
View file

This file was deleted.

40 DGA/unclassified/2021-12-07-DGALIST-8E590528D5FC336C6E3604550F1BB9F5.txt
View file

This file was deleted.

20 DGA/unclassified/2021-12-07-DGALIST-D3308B4D8579FBDDB44727A2A5EE5C34.txt
View file

This file was deleted.

23 DGA/unclassified/2022-01-07-DGALIST-02F7C54E0EE16A01E420275BADA1C1F4.txt
View file
@@ -0,0 +1,23 @@
bwvrhppl.biz
djaqppef.org
dzfjabuo.biz
hyvgizhk.org
jcoptzbe.biz
jktuxzio.biz
lkghzpum.biz
lvpalxkk.biz
lzbvpacs.biz
mfgsedhj.biz
mprsstpl.biz
polllemk.org
pyofptjx.org
qawhnwyo.org
qsefdtpw.org
qyztvydk.biz
reyqtkkc.biz
uaoxaytv.org
udylyncr.org
vypmnjjr.biz
wotjlzfr.org
yiyquexa.org
zozxjfrm.org
463 DGA/unclassified/2022-01-07-DGALIST-04DE853DCFFFF3D2EABF69DFA595B7BD.txt
View file

Large diffs are not rendered by default.

2,967 DGA/unclassified/2022-01-07-DGALIST-336C8082667048A2EDBD0AAC6365FE83.txt
View file

Large diffs are not rendered by default.

16,178 DGA/unclassified/2022-01-07-DGALIST-5975D26327BD8AB10D2202B59F8F99CA.txt
View file

Large diffs are not rendered by default.

2,967 DGA/unclassified/2022-01-07-DGALIST-C251C4F5C66332BEE745EAE8DECA8CBC.txt
View file

Large diffs are not rendered by default.

42 ioc_extender/BB_TA575-Dridex.json
View file
@@ -3978,6 +3978,12 @@
"type": "certs",
"ln": 2
},
{
"host": "dantaylor.us",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "darkhaven.net",
"links": "16d505d31cb4a57615e13cb2b822524e01879788",
@@ -4014,6 +4020,12 @@
"type": "certs",
"ln": 2
},
{
"host": "darkhaven.net",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "darlingofdrinks.com",
"links": "0583a3efae17fb86bae6b737af341ee95a100b53",
@@ -4152,6 +4164,12 @@
"type": "certs",
"ln": 2
},
{
"host": "dav.darkhaven.net",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "daveperry.net",
"links": "0583a3efae17fb86bae6b737af341ee95a100b53",
@@ -7512,6 +7530,12 @@
"type": "certs",
"ln": 2
},
{
"host": "metatron.darkhaven.net",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "miapple.ca",
"links": "0583a3efae17fb86bae6b737af341ee95a100b53",
@@ -11208,6 +11232,12 @@
"type": "certs",
"ln": 2
},
{
"host": "v4.darkhaven.net",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "v6.darkhaven.net",
"links": "16d505d31cb4a57615e13cb2b822524e01879788",
@@ -11238,6 +11268,12 @@
"type": "certs",
"ln": 2
},
{
"host": "v6.darkhaven.net",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "vm2180206.12ssd.had.wf",
"links": "103.246.144.167",
@@ -12852,6 +12888,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.dantaylor.us",
"links": "b5a40de9a475c7d7887ada0b41440dbd3949061d",
"type": "certs",
"ln": 2
},
{
"host": "www.darlingofdrinks.com",
"links": "0583a3efae17fb86bae6b737af341ee95a100b53",
48 ioc_extender/ET_APT33.json
View file
@@ -72,6 +72,12 @@
"type": "certs",
"ln": 2
},
{
"host": "dev.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "dev.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -408,6 +414,12 @@
"type": "certs",
"ln": 2
},
{
"host": "hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -756,6 +768,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "mail.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -1092,6 +1110,12 @@
"type": "certs",
"ln": 2
},
{
"host": "n3tc4t.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "n3tc4t.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -1416,6 +1440,12 @@
"type": "certs",
"ln": 2
},
{
"host": "proxymaterials.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "proxymaterials.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -1782,6 +1812,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.dev.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "www.dev.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -2100,6 +2136,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "www.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
@@ -2418,6 +2460,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.proxymaterials.hopto.com",
"links": "11db4252052a6c64385d895c887f9e5ffec6b1cc",
"type": "certs",
"ln": 2
},
{
"host": "www.proxymaterials.hopto.com",
"links": "137793a57e5ec4819bf1e7d4f341deee7faccc90",
72 ioc_extender/ET_Gamaredon.json
View file
@@ -1392,6 +1392,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "89.108.77.204",
@@ -1926,6 +1932,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "89.108.77.204",
@@ -2604,6 +2616,12 @@
"type": "certs",
"ln": 2
},
{
"host": "fgh.abanotermehotels.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "filelinks.live",
"links": "73209463937f97c1ae8be060f4e1743e909b3a6d",
@@ -3372,6 +3390,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "89.108.77.204",
@@ -3684,6 +3708,12 @@
"type": "certs",
"ln": 2
},
{
"host": "info.datastrategy.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "info.kavalabonline.com",
"links": "73209463937f97c1ae8be060f4e1743e909b3a6d",
@@ -4458,6 +4488,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "89.108.77.204",
@@ -4674,6 +4710,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "89.108.77.204",
@@ -4734,6 +4776,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lycaenidae.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "m.start-el.com",
"links": "193.124.206.65",
@@ -4758,6 +4806,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "mail.abanotermehotels.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "mail.bertis.ru",
"links": "173.199.70.149",
@@ -4770,6 +4824,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail.datastrategy.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "mail.heteroptera.ru",
"links": "89.108.83.23",
@@ -4782,6 +4842,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail20.abanotermehotels.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "mailer.pmayindia.com",
"links": "73209463937f97c1ae8be060f4e1743e909b3a6d",
@@ -6630,6 +6696,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "89.108.70.22",
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "89.108.77.204",
12 ioc_extender/ET_Sidecopy_APT_Related.json
View file
@@ -48,6 +48,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "afcat.xyz",
"links": "d518ea29a94b6b81682d5c97d25eb10bcedc26c5",
"type": "certs",
"ln": 2
},
{
"host": "afghannewsnetwork.com",
"links": "194.163.139.250",
@@ -66,6 +72,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "newsroom247.xyz",
"links": "d518ea29a94b6b81682d5c97d25eb10bcedc26c5",
"type": "certs",
"ln": 2
},
{
"host": "republicofaf.xyz",
"links": "194.163.139.250",
42 ioc_extender/HP_CryptBot.json
View file
@@ -42,12 +42,6 @@
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "befsvn75.top",
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "bojofa05.top",
@@ -534,6 +528,18 @@
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "zyokao27.top",
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "zyonou41.top",
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "zyoskv38.top",
@@ -654,12 +660,6 @@
"type": "pdns",
"ln": 2
},
{
"host": "befsvn75.top",
"links": "88.119.161.76",
"type": "pdns",
"ln": 2
},
{
"host": "bojofa05.top",
"links": "5.188.88.213",
@@ -1782,11 +1782,29 @@
"type": "pdns",
"ln": 2
},
{
"host": "zyokao27.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
},
{
"host": "zyonou41.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
},
{
"host": "zyoskv38.top",
"links": "23.254.228.41",
"type": "pdns",
"ln": 2
},
{
"host": "zyoyes51.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
}
]
}
18 ioc_extender/HP_IcedID.json
View file
@@ -258,6 +258,12 @@
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: IcedID",
"links": "vailablfilin.top",
"type": "z",
"ln": 2
},
{
"host": "additionalsupport.fun",
"links": "91.193.16.151",
@@ -2994,6 +3000,18 @@
"type": "pdns",
"ln": 2
},
{
"host": "vailablfilin.top",
"links": "23.227.203.75",
"type": "pdns",
"ln": 2
},
{
"host": "vailablfilin.top",
"links": "5cc611658c27d89b6a30f7f7dd488a3dd9dfcc76",
"type": "certs",
"ln": 2
},
{
"host": "viewsketplctly.fun",
"links": "185.70.184.43",
6 ioc_extender/TF_Chrysaor.json
View file
@@ -1572,6 +1572,12 @@
"type": "certs",
"ln": 2
},
{
"host": "scapes.io",
"links": "ce078e35847244a3d112e15aa72c9177e9db15fe",
"type": "certs",
"ln": 2
},
{
"host": "sccfairworkpl.ace.co",
"links": "212a5baea8c97b02ddb9d6efbc4dd80032f8ac79",
520 ioc_extender/TF_Cobalt_Strike.json
View file

Large diffs are not rendered by default.

30 ioc_extender/TF_CryptBot.json
View file
@@ -324,6 +324,18 @@
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: CryptBot",
"links": "zyokao27.top",
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: CryptBot",
"links": "zyonou41.top",
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: CryptBot",
"links": "zyoskv38.top",
@@ -870,11 +882,29 @@
"type": "pdns",
"ln": 2
},
{
"host": "zyokao27.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
},
{
"host": "zyonou41.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
},
{
"host": "zyoskv38.top",
"links": "23.254.228.41",
"type": "pdns",
"ln": 2
},
{
"host": "zyoyes51.top",
"links": "146.185.239.16",
"type": "pdns",
"ln": 2
}
]
}
24 ioc_extender/TF_IcedID.json
View file
@@ -1080,6 +1080,12 @@
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: IcedID",
"links": "vailablfilin.top",
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: IcedID",
"links": "viewsketplctly.fun",
@@ -5040,12 +5046,24 @@
"type": "pdns",
"ln": 2
},
{
"host": "ns1.araves.org",
"links": "194.147.115.14",
"type": "pdns",
"ln": 2
},
{
"host": "ns1.fedonly.fit",
"links": "194.156.99.243",
"type": "pdns",
"ln": 2
},
{
"host": "ns1.vef.am",
"links": "194.147.115.14",
"type": "pdns",
"ln": 2
},
{
"host": "numereshka.top",
"links": "185.186.245.229",
@@ -6876,6 +6894,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "vailablfilin.top",
"links": "23.227.203.75",
"type": "pdns",
"ln": 2
},
{
"host": "versonizonkil.top",
"links": "185.186.247.85",
48 ioc_extender/TF_NetWire_RC.json
View file
@@ -36,6 +36,36 @@
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: NetWire RC",
"links": "securedns360.hopto.org",
"type": "z",
"ln": 2
},
{
"host": "engine79.ddns.net",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "halwachi50.mymediapc.net",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "mathkros79.ddns.net",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "mickeyjones.ddns.net",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "netwire.linkpc.net",
"links": "185.157.160.229",
@@ -47,6 +77,24 @@
"links": "217.64.149.171",
"type": "pdns",
"ln": 2
},
{
"host": "owo.myftp.biz",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "securedns360.hopto.org",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
},
{
"host": "william1979.ddns.net",
"links": "184.105.237.196",
"type": "pdns",
"ln": 2
}
]
}
432 ioc_extender/TF_QakBot.json
View file

Large diffs are not rendered by default.

54 ioc_extender/TF_SmokeLoader.json
View file
@@ -3594,6 +3594,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "189.129.105.161",
"type": "pdns",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "189.141.138.172",
@@ -7446,6 +7452,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "mayak-lombard.ru",
"links": "187.156.56.69",
"type": "pdns",
"ln": 2
},
{
"host": "mayak-lombard.ru",
"links": "187.212.195.67",
@@ -7608,6 +7620,18 @@
"type": "certs",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "110.14.121.123",
"type": "pdns",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "148.0.74.229",
"type": "pdns",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "175.126.109.15",
@@ -7632,6 +7656,18 @@
"type": "pdns",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "186.188.224.208",
"type": "pdns",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "186.6.58.154",
"type": "pdns",
"ln": 2
},
{
"host": "melchen-testet.at",
"links": "186.7.152.199",
@@ -8658,6 +8694,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "parfaite.cn",
"links": "7d96d6daa03c598682b228d4aa8b33d27c399ed2",
"type": "certs",
"ln": 2
},
{
"host": "pathofancientwisdom.com",
"links": "30728b5bc161bfc64c72fa6ced5540e54068dc94",
@@ -8736,6 +8778,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "privacy-tools-for-you-778.com",
"links": "47.251.44.201",
"type": "pdns",
"ln": 2
},
{
"host": "privacy-tools-for-you-778.com",
"links": "89.223.65.17",
@@ -9108,6 +9156,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "rcacademy.at",
"links": "186.6.58.154",
"type": "pdns",
"ln": 2
},
{
"host": "rcacademy.at",
"links": "186.7.152.199",
120 ioc_extender/TF_magecart.json
View file
@@ -66,6 +66,12 @@
"type": "certs",
"ln": 2
},
{
"host": "1productstore.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "33peredpokupkoy.xyz",
"links": "45.142.213.55",
@@ -354,6 +360,12 @@
"type": "certs",
"ln": 2
},
{
"host": "absolut-law.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "acdn.space",
"links": "8.209.69.3",
@@ -546,6 +558,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "balismokepods.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "balzamy-korotkova.ru",
"links": "4d8e2becdfb0a3309e46e243b1f98b46ae049d36",
@@ -564,6 +582,12 @@
"type": "certs",
"ln": 2
},
{
"host": "bazarbaev-nsk.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bbbeeduperspektiva.store",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
@@ -606,6 +630,12 @@
"type": "certs",
"ln": 2
},
{
"host": "bestshop2002.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "betrliocasnajlozmeya.store",
"links": "9c73f26d08c80392fcf32de60e43cfc5586b26f8",
@@ -618,12 +648,24 @@
"type": "certs",
"ln": 2
},
{
"host": "bghhoop.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bigeuras.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bigshopin.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bing-analytics.com",
"links": "75c0ea19de1fd410d285f8d4ae3c98454627ef1f",
@@ -648,6 +690,18 @@
"type": "certs",
"ln": 2
},
{
"host": "birimdikte.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bitcoincodede.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bitcoincodedede.ru",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
@@ -660,6 +714,12 @@
"type": "certs",
"ln": 2
},
{
"host": "bloovar.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bluecartservice.com",
"links": "e9cc91f196749b191de96bdf10a7c7052779bae2",
@@ -672,6 +732,12 @@
"type": "certs",
"ln": 2
},
{
"host": "bropen.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "bsheepeds.store",
"links": "9c73f26d08c80392fcf32de60e43cfc5586b26f8",
@@ -936,6 +1002,12 @@
"type": "certs",
"ln": 2
},
{
"host": "easyshoop.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "ehlektrika-uslugi.ru",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
@@ -1008,6 +1080,12 @@
"type": "certs",
"ln": 2
},
{
"host": "firestarter21.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "fishbomb.fun",
"links": "1dc7ca935531db252239c91440098887efe4af03",
@@ -1044,12 +1122,24 @@
"type": "certs",
"ln": 2
},
{
"host": "frezerovka-pnej.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "fromkisjfoadfs.store",
"links": "9c73f26d08c80392fcf32de60e43cfc5586b26f8",
"type": "certs",
"ln": 2
},
{
"host": "fruttyland.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "g.doubleclick.cn",
"links": "e6de7555610b4185511c4ff67a2498c9afbc1b90",
@@ -1062,6 +1152,12 @@
"type": "certs",
"ln": 2
},
{
"host": "gazfuturestocks.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "gcdn.space",
"links": "8.209.69.3",
@@ -2376,6 +2472,12 @@
"type": "certs",
"ln": 2
},
{
"host": "osh1bk.space",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "otoplenie-doma-ustanovka.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
@@ -2682,6 +2784,12 @@
"type": "certs",
"ln": 2
},
{
"host": "safe3-92.ru",
"links": "e6de7555610b4185511c4ff67a2498c9afbc1b90",
"type": "certs",
"ln": 2
},
{
"host": "sbsparts.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
@@ -2982,6 +3090,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "thermosphere.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "thiperss.ru",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
@@ -3042,6 +3156,12 @@
"type": "certs",
"ln": 2
},
{
"host": "ukruobuv.ru",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
"type": "certs",
"ln": 2
},
{
"host": "untangleyourexpertise.com",
"links": "a951f9fc12e88f31f5ab333398650165dd884eb1",
448 mirai_ddos_victims/2021-12-07-mirai_ddos_victims.json
View file

This file was deleted.

12,906 mozi_tracker/2021-12-07-MOZI-IPLIST.txt
View file

This file was deleted.

12,783 mozi_tracker/2022-01-07-MOZI-IPLIST.txt
View file

Large diffs are not rendered by default.