不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様2社 -
2026/06/22
※2026/06/22 更新
マルウェア感染させると考えられるURLを検知（2026/06/22）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://x69rs3qk[.]rasmfani[.]xyz/?ublib=cc93a7aa-e05e-4db3-80c6-4480c673e63a hxxps://aulvud5j[.]dancebetyek[.]app/?ublib=14a4ad34-78c1-48a1-b1ad-ed580f6a39bd hxxps://frptny6s[.]angizeshfarahani[.]store/?ublib=ae7c9999-ff27-42bb-8720-65085960a798 hxxps://9fuqcqf6[.]ravabetensani[.]site/?ublib=67689726-ca2d-4126-b5ea-992826c69a3b hxxps://dy6t49rl[.]akhlagvaahkam[.]xyz/?ublib=b772fa33-4296-4871-a22a-55f6d99203da hxxps://gitoxy22[.]hugugtatbigi[.]xyz/?ublib=12d5e589-2730-4f99-a61f-2116068a1ada hxxps://lh7umyc5[.]riyazishahkilid[.]xyz/?ublib=e7e921ca-49eb-4e09-8114-5250b448040e hxxps://i9yfz7a0[.]asibshenasiyahya[.]shop/?ublib=42bf9821-47b1-4f86-80cf-af4340fa39b0 hxxps://ma3ukklt[.]riyaziyattajrobi[.]xyz/?ublib=9d0efbe7-d4fe-412d-a8a3-5340710cf3a4 hxxps://borb5c9q[.]megaparikade[.]com/?ublib=a4f60686-52c8-488d-b828-2efa2e38ffb9 hxxps://eub0atxx[.]tafsirnasiri[.]xyz/?ublib=61552d60-b336-4872-af31-450d86a0e1bb hxxps://9k4etp9p[.]azmoondadrasi[.]xyz/?ublib=404acca0-be0f-4ae7-87ad-710f8d51d924 hxxps://byvvv0is[.]anodaz[.]co/?ublib=21555214-4c66-4be2-b550-6eb8d7abf589 hxxps://kqldanpg[.]testdrivepaye3[.]com/?ublib=19b26b7f-fe38-4016-a8a6-b85d6f133179 hxxps://7p8in376[.]tahgigbazargan[.]xyz/?ublib=c89cc9cd-6f84-4aef-a327-98936d9fb796 hxxps://aygi86ej[.]tahlilsazeha[.]xyz/?ublib=9e94590f-2f5b-4d05-973b-c76a1edde7eb hxxps://2rvmsbh4[.]bet303[.]download/?ublib=8814af92-9f82-4200-9c73-faffa9eb9f5a hxxps://fvkyh2up[.]testpaye[.]xyz/?ublib=c0d42fcd-2171-40e4-a759-9d2c5a6f9852 hxxps://0q26dscq[.]anodaz[.]vip/?ublib=111233da-a24b-450a-851f-4a875af1c597 hxxps://pz5clklw[.]tanasobmafhumi[.]xyz/?ublib=f3789c0b-645e-4d51-b665-0ff38995e7ee hxxps://jqqh90zb[.]usoleamoozesh[.]xyz/?ublib=5928c2ac-7174-4927-afc5-2cb0973c7ff0 hxxps://s18b1z48[.]tarahisystem[.]xyz/?ublib=e5eaaa54-1db9-4048-880c-0cb05262ad15 hxxps://owxoxg4v[.]jetbetkade[.]com/?ublib=86afe00d-8653-407b-a4e2-3d60388a4e30 hxxps://4nd2h8ef[.]bio90[.]football/?ublib=68e63799-94d1-4249-8e3e-b745c613f3e3 hxxps://7ooj1o3v[.]tarbiyateslami[.]xyz/?ublib=aa879d2a-0555-45e3-8f82-e884a5c1d702 hxxps://umusdqbj[.]hesabdarieskandari[.]xyz/?ublib=c61cdf62-4dba-4044-b272-c9c935e2a19d hxxps://sjn9cbzs[.]betvarzeshkade[.]online/?ublib=ff151024-5d4e-49df-9a1b-a2592cd87a77 hxxps://n7yv4866[.]qurankarim[.]xyz/?ublib=9bac4235-18e2-4b15-914f-d6b5c569ba96 hxxps://byz28tfk[.]rasmfani[.]xyz/?ublib=6def8626-d0ec-45d8-a55e-b63acb8cbfef hxxps://i83pv2vx[.]ravabetensani[.]site/?ublib=b5cff80e-b66c-4ff5-a889-5ad30b96a4bb hxxps://0knbl1ve[.]hugugmadanikatouzian[.]xyz/?ublib=22fb1bab-933c-4bf8-8505-aa26e0ad0327 hxxps://ci7lslzb[.]enfej[.]win/?ublib=61310ee4-8ffc-484b-a895-ce4c3e99c677 hxxps://g6gib60b[.]raftarsazmani[.]xyz/?ublib=408ef56f-c1bb-4082-8619-28b580434ba1 hxxps://0odlgi4q[.]motuntakhasosi[.]store/?ublib=9e4106e1-b3ee-4342-a215-712578feb755 hxxps://e57ra5jx[.]plinkobet[.]casino/?ublib=d42075c4-e0eb-48dd-b2a4-de7db9f7a7a5 hxxps://lc5lya7l[.]romabetkade[.]com/?ublib=68ac466e-8b27-4e71-9ed1-fa6aa3370cf5 hxxps://gjjyn1c2[.]plinko[.]mobi/?ublib=14c5924f-cc5c-482b-ad64-3c54f3af01ac hxxps://7cj04th6[.]shartland[.]com/?ublib=b2d2ef25-684e-41f3-8551-e611e71778ee hxxps://7l4byl0u[.]mustatabashpazi[.]shop/?ublib=9f2a6de4-e120-4cc8-b431-c346378d9e6b hxxps://v8xihekm[.]ramzfile[.]com/?ublib=5faebbf8-e155-43d4-8ca2-c27159814744 hxxps://05jsazp3[.]shart[.]casino/?ublib=1d28f3ea-d3c9-4384-ba4c-6c9caf7b8125 hxxps://13i466gp[.]shart303[.]com/?ublib=11373dc2-14e6-4809-a498-662efd34d650 hxxps://9s34xd0g[.]rahnemayenegaresh[.]site/?ublib=e0a9cd24-ed90-4f22-9204-3b1509469822 hxxps://87khq5gx[.]ravabetensani[.]site/?ublib=ca0a10e1-15b1-489c-a27f-7703d460170c hxxps://77h5jddd[.]yek1[.]bet/?ublib=0f6e2464-5512-4f2b-8517-43be4f0313ec hxxps://guo1otbf[.]shartplus[.]com/?ublib=816bcaea-b165-41a7-b019-b56622b06566 hxxps://y0fm52vk[.]tarahisystem[.]xyz/?ublib=f1ef8854-65ee-4dd3-8a0a-345d43dd7552 hxxps://txm0jrdz[.]rahnemayenegaresh[.]site/?ublib=65c18bdf-2858-44da-89bd-b68adb35fd03 hxxps://rurhmgw2[.]readthisintro[.]xyz/?ublib=cf3f7cbc-a614-49da-926a-36cd8aea53ba hxxps://58shz66o[.]tahlilsazeha[.]xyz/?ublib=09504c92-600d-4386-9a6e-450eaf13a8b8 hxxps://zxe9u0st[.]sigaribetkade[.]com/?ublib=8f2689ff-a327-4e0a-a31b-9cd5e303bed3 hxxps://4q74zsh8[.]raftarsazmani[.]xyz/?ublib=766e687f-9634-4ef4-819a-e71eaffcb591 hxxps://wljus01z[.]tafsirnasiri[.]xyz/?ublib=a24bde55-3a6d-472d-9a9d-c4fe4e9e9d68 hxxps://lqakwmlg[.]taktikbetkade[.]com/?ublib=36f4445b-d57c-42f2-b606-a03acd39c2bb hxxps://zuldqm04[.]riyaziyattajrobi[.]xyz/?ublib=a2672a1a-566a-4588-aa06-c8e43d5596ae hxxps://o0gbvk16[.]winenfejar[.]com/?ublib=cb73ba8b-9b71-4004-9a42-b0f10ed2fd0f hxxps://vqdtk497[.]bio90[.]football/?ublib=cdd73d74-48e8-442f-b1e3-89e30b7a5e9c hxxps://nonlddo9[.]riyazishahkilid[.]xyz/?ublib=9f8abff7-2551-4575-835d-bced68005c79 hxxps://liwxdd48[.]romabetkade[.]com/?ublib=6698df11-0d32-4e73-99f8-d80debf3d869 hxxps://iplzbag0[.]shartbandi[.]casino/?ublib=2b5744cb-cb73-4b3b-9c62-c22db6b43ef6 hxxps://dv4wbkrb[.]shart[.]casino/?ublib=43e82bf4-5102-4cb0-a9fa-8d7f8d43b410 hxxps://wc7skdzu[.]yakhbet[.]com/?ublib=5f3947b8-7bd0-4a41-b459-639acfd79669 hxxps://l3q1ng7a[.]azmoondadrasi[.]xyz/?ublib=a22b3a25-b16c-41f8-bf5b-1ee31e8dd83b hxxps://jootj2zm[.]zabantehrani[.]shop/?ublib=af4da29a-f2d1-4f9e-86ca-ac457ceae7b4 hxxps://g9lo26em[.]shartland[.]com/?ublib=56f774b3-8d87-4b3a-b695-3534d6c5fcd3 hxxps://bbzvqin8[.]zamineravan[.]xyz/?ublib=9e0a6d88-1e49-463b-8de7-60e1dffccce0 hxxps://s6va4ija[.]asibshenasiyahya[.]shop/?ublib=08008267-152d-4e5d-bce6-b717c0b128b8 hxxps://ceitnaao[.]zamineravanshenasi[.]xyz/?ublib=8f400450-60ce-4df1-bf58-94d7bff91700 hxxps://mlm2cm0b[.]yasbetkade[.]com/?ublib=76119499-e141-4378-913d-82bedd91d884 hxxps://cp45rrnx[.]shartplus[.]com/?ublib=8c05bfc1-3c08-4bb4-a524-f1d57ccb6469 hxxps://xfq2kf92[.]angizeshfarahani[.]store/?ublib=e5dd0f36-e327-46a2-86a0-feab81a39cb9 hxxps://s3zzh7np[.]sigaribetkade[.]com/?ublib=4ac125da-b165-43f9-8ff9-2533409a7a09 hxxps://xlp38wsp[.]yekiran[.]com/?ublib=01c443ba-9eeb-4df3-88ff-7802e8625144 hxxps://q3wqwvcx[.]ahkam[.]xyz/?ublib=f1268677-a220-4abb-b582-1db2329de012 hxxps://yezqbe5v[.]tarahisystem[.]xyz/?ublib=485b1aed-be09-4f12-8cfb-d39c46408f8d hxxps://4wi7kgpf[.]tinybetkade[.]com/?ublib=750af544-cc40-4e01-b5ab-1af6fde9ceb0 hxxps://8tgfwtsg[.]zamineravan[.]xyz/?ublib=29c59a7e-c8f6-4450-92d0-0e39ec1ff97a hxxps://6xelt3vl[.]shartplus[.]com/?ublib=b7994dc1-d98b-4389-8a1c-566e41ae6338 hxxps://kefds8uo[.]zerangbet[.]com/?ublib=430d563a-4421-4543-9f73-367aa9af43cd hxxps://zyppn5vo[.]riyazishahkilid[.]xyz/?ublib=c0a1dccf-aa24-42e6-9e58-c53f82ffdf5e hxxps://6w8npdwb[.]angizeshfarahani[.]store/?ublib=f03a4ac2-4ff0-4f5a-8f32-12df3ea32699 hxxps://ah8vpm3o[.]tafsirnasiri[.]xyz/?ublib=d051667a-d10c-4178-9e73-c878b617f7ca hxxps://c8u4wod9[.]shartland[.]com/?ublib=40b842e1-a2f0-404c-b427-83b1ef06e618 hxxps://zonk2dl9[.]asibshenasiyahya[.]shop/?ublib=bb006138-4dff-4f04-a3eb-c1a5bf21df70 hxxps://phitqv0l[.]ravabetensani[.]site/?ublib=8cb11574-6afb-4fb4-a70c-898c94a71ed8 hxxps://ut7worjq[.]1x303[.]casino/?ublib=0a28e243-c858-4fbc-b38c-34b86149ee35 hxxps://kbm5utm8[.]shart303[.]com/?ublib=3dcacdb9-68d7-4a42-b910-ecdd4d6c617f hxxps://gdxai3cp[.]shart[.]casino/?ublib=b6244de1-ed51-408d-89b2-2ae5b36f7e6e hxxps://n8n69sm2[.]bcgameiran[.]net/?ublib=0e9ab0c1-5d62-4b23-9d6f-c0584832e9dc hxxps://jb9ff818[.]azmoondadrasi[.]xyz/?ublib=f5040799-e869-4d7c-b0e7-fd361ff9310c hxxps://jettvp45[.]taktikbetkade[.]com/?ublib=88a15594-f571-4446-b4f1-553cdaa86076 hxxps://q10plfmg[.]bcgame[.]poker/?ublib=6c77646c-f21f-44ff-91a6-3477a9542899 hxxps://zsrqcgeo[.]1xyek[.]bet/?ublib=185f1b81-97dc-4e65-bde3-9e99f131632e hxxps://qraju7pt[.]betmegapari[.]net/?ublib=33e7dd8b-b19d-4396-8075-cd8edc1b4841 hxxps://34va0c3e[.]bio90[.]football/?ublib=a5aa14e2-53a4-4b23-89e0-3718c9c7fc02 hxxps://uqz8xcw9[.]gamebc[.]bet/?ublib=59043426-8473-4a7d-a8f5-2fddceecfc5a hxxps://bxdc6z4b[.]betmegapari[.]org/?ublib=7352ee3f-621e-416c-88f1-5440db8ee265 |
ClearFake |
| URL | hxxp://dfgjhkllkhuuk[.]info/load/hnmh[.]exe hxxp://dfgjhkllkhuuk[.]info/load/ojujn[.]exe hxxp://dfgjhkllkhuuk[.]info/load/jhgkuyyg[.]exe hxxp://dfgjhkllkhuuk[.]info/load/hjbk[.]exe hxxp://dfgjhkllkhuuk[.]info/load/kliulij[.]exe hxxp://dfgjhkllkhuuk[.]info/load/bjbh[.]exe hxxp://158[.]94[.]210[.]207:8080/Vmlyjlrir[.]exe |
Lumma Stealer |
| URL | hxxps://mail[.]avicennaalliedhealthinstitute[.]org/stubIN[.]ps1 | Stealerium |
| URL | hxxp://23[.]95[.]103[.]214/dreamchaser[.]png | Agent Tesla |
| URL | hxxps://brenmayasociados[.]com/sass/djboynew1[.]png hxxp://147[.]124[.]214[.]156/99_MSI[.]png |
XWorm |
| URL | hxxp://196[.]251[.]107[.]104/clp8[.]exe | XTinyLoader |
| URL | hxxp://64[.]89[.]163[.]22/49[.]elf hxxp://45[.]225[.]135[.]18:8080/I53KfWiXe hxxp://64[.]89[.]163[.]22:8080/ZtNzfCdj2VGYFlW hxxp://64[.]89[.]163[.]22/vmware-setup[.]msi |
Meterpreter |
| URL | hxxp://160[.]30[.]142[.]218:34669/Mozi[.]m hxxp://175[.]107[.]230[.]24:57256/Mozi[.]a hxxp://153[.]117[.]37[.]104:59732/Mozi[.]m hxxp://72[.]255[.]32[.]68:46117/Mozi[.]m hxxp://59[.]103[.]100[.]2:33514/Mozi[.]m hxxp://115[.]55[.]85[.]7:55027/Mozi[.]m hxxp://103[.]115[.]199[.]18:53070/Mozi[.]m hxxp://153[.]117[.]33[.]228:44081/Mozi[.]a hxxp://103[.]173[.]7[.]226:33627/Mozi[.]m hxxp://202[.]47[.]56[.]219:49775/Mozi[.]m hxxp://59[.]97[.]250[.]56:43042/Mozi[.]m hxxp://110[.]39[.]233[.]163:45754/Mozi[.]a hxxp://36[.]255[.]44[.]120:49117/Mozi[.]m hxxp://223[.]123[.]125[.]13:46831/Mozi[.]m hxxp://175[.]107[.]212[.]44:38058/Mozi[.]a hxxp://144[.]48[.]130[.]229:38194/Mozi[.]m hxxp://153[.]117[.]51[.]96:36126/Mozi[.]m hxxp://153[.]117[.]6[.]120:50638/Mozi[.]m hxxp://122[.]50[.]1[.]26:33627/Mozi[.]m hxxp://101[.]31[.]81[.]241:51191/Mozi[.]a hxxp://223[.]123[.]72[.]190:60788/Mozi[.]m hxxp://125[.]45[.]68[.]162:39862/Mozi[.]a hxxp://102[.]33[.]46[.]27:37709/Mozi[.]m hxxp://115[.]42[.]75[.]105:44616/Mozi[.]m hxxp://14[.]1[.]104[.]134:40274/Mozi[.]a hxxp://103[.]18[.]14[.]247:60764/Mozi[.]m hxxp://220[.]112[.]61[.]85:36541/Mozi[.]m hxxp://45[.]230[.]66[.]118:10669/Mozi[.]m hxxp://112[.]239[.]122[.]134:39926/Mozi[.]m hxxp://81[.]26[.]83[.]155:39307/Mozi[.]m hxxp://202[.]9[.]122[.]224:35583/Mozi[.]m hxxp://45[.]230[.]66[.]102:10676/Mozi[.]m hxxp://185[.]221[.]253[.]69:37779/Mozi[.]a hxxp://153[.]117[.]6[.]68:51654/Mozi[.]a hxxp://45[.]230[.]66[.]112:10059/Mozi[.]m hxxp://103[.]181[.]161[.]31:48115/Mozi[.]m hxxp://45[.]230[.]66[.]104:10973/Mozi[.]m hxxp://103[.]181[.]160[.]235:38778/Mozi[.]m hxxp://153[.]117[.]32[.]204:59142/Mozi[.]a hxxp://139[.]135[.]42[.]99:32954/Mozi[.]m hxxp://103[.]146[.]110[.]242:47794/Mozi[.]m hxxp://182[.]117[.]70[.]107:59733/Mozi[.]7 hxxp://144[.]48[.]130[.]215:51670/Mozi[.]a hxxp://110[.]38[.]218[.]245:46130/Mozi[.]m hxxp://222[.]140[.]134[.]61:37273/Mozi[.]m hxxp://153[.]117[.]52[.]69:51838/Mozi[.]m hxxp://153[.]117[.]9[.]190:56846/Mozi[.]m hxxp://223[.]123[.]73[.]214:56098/Mozi[.]m hxxp://117[.]209[.]7[.]37:53123/Mozi[.]m hxxp://223[.]123[.]124[.]127:43961/Mozi[.]m hxxp://117[.]245[.]138[.]25:53071/Mozi[.]m hxxp://172[.]168[.]148[.]38:60105/Mozi[.]m hxxp://202[.]9[.]123[.]77:50006/Mozi[.]m hxxp://112[.]25[.]235[.]194:41076/Mozi[.]m hxxp://223[.]123[.]41[.]67:37213/Mozi[.]a hxxp://115[.]55[.]232[.]238:45652/Mozi[.]m hxxp://223[.]123[.]125[.]8:43836/Mozi[.]m hxxp://101[.]53[.]233[.]87:49158/Mozi[.]m hxxp://119[.]30[.]117[.]62:57777/Mozi[.]m hxxp://103[.]176[.]16[.]93:47938/Mozi[.]m hxxp://223[.]123[.]77[.]15:48168/Mozi[.]m hxxp://139[.]135[.]41[.]214:57108/Mozi[.]a hxxp://113[.]99[.]201[.]216:40944/Mozi[.]a hxxp://186[.]4[.]217[.]208:43140/Mozi[.]m hxxp://42[.]230[.]218[.]169:36211/Mozi[.]m hxxp://85[.]12[.]229[.]54:45873/Mozi[.]m hxxp://72[.]255[.]3[.]97:44709/Mozi[.]m hxxp://223[.]123[.]43[.]68:54638/Mozi[.]m hxxp://103[.]225[.]191[.]207:48112/Mozi[.]m hxxp://185[.]94[.]182[.]57:35814/Mozi[.]m hxxp://139[.]135[.]59[.]145:34945/Mozi[.]a hxxp://103[.]146[.]111[.]93:37443/Mozi[.]m hxxp://27[.]215[.]55[.]164:43326/Mozi[.]m hxxp://223[.]123[.]42[.]234:43318/Mozi[.]a hxxp://223[.]123[.]38[.]127:60991/Mozi[.]m hxxp://103[.]141[.]5[.]137:41713/Mozi[.]a hxxp://153[.]117[.]15[.]187:54011/Mozi[.]m hxxp://223[.]123[.]124[.]121:60095/Mozi[.]7 hxxp://45[.]230[.]66[.]112:11404/Mozi[.]m hxxp://103[.]186[.]77[.]95:49560/Mozi[.]a hxxp://72[.]255[.]3[.]39:41763/Mozi[.]m hxxp://153[.]117[.]13[.]227:34153/Mozi[.]m hxxp://82[.]144[.]86[.]37:38207/Mozi[.]m hxxp://119[.]73[.]19[.]131:53332/Mozi[.]m hxxp://110[.]38[.]254[.]172:58822/Mozi[.]m hxxp://153[.]117[.]15[.]86:42008/Mozi[.]m hxxp://223[.]123[.]42[.]235:41900/Mozi[.]a hxxp://110[.]39[.]255[.]247:35440/Mozi[.]m hxxp://110[.]36[.]86[.]0:55983/Mozi[.]m |
Mozi |
| URL | hxxp://91[.]92[.]242[.]236/files-129312398/files/file_1443878c027b966b[.]exe hxxp://91[.]239[.]211[.]89/bins/kworkerd-irq hxxp://91[.]239[.]211[.]89/bins/kworkerd-netns-rt hxxp://91[.]239[.]211[.]89/bins/kworkerd-irq-bal hxxp://91[.]239[.]211[.]89/bins/kworkerd-events hxxp://91[.]239[.]211[.]89/bins/kworkerd-blkcg hxxp://91[.]239[.]211[.]89/bins/kworkerd-netns hxxp://91[.]239[.]211[.]89/bins/kworkerd hxxp://91[.]239[.]211[.]89/bins/kworkerd-rcu hxxp://91[.]239[.]211[.]89/bins/kworkerd-softirq hxxp://91[.]239[.]211[.]89/bins/kworkerd-cgroup hxxp://91[.]239[.]211[.]89/bins/kworkerd-writeback hxxp://213[.]21[.]250[.]7:8080/client[.]exe hxxps://www[.]nccommunication[.]be/images/y11[.]png hxxp://51[.]15[.]39[.]25/m[.]png hxxp://64[.]89[.]163[.]22/deploy_softwaretech[.]sh |
Coinminer |
| URL | hxxps://api[.]telegram[.]org/bot5718429344:AAGj9VtrPr3EJllVGKCnHo4xEad2wOjTVhI/sendMessage?chat_id=1335554815 | Snake Keylogger |
| URL | hxxp://66[.]63[.]170[.]34/img/optimized_MSI[.]png | Remcos |
| URL | hxxp://194[.]48[.]251[.]24/mips hxxp://203[.]159[.]90[.]249/assailant[.]arm5 hxxp://203[.]159[.]90[.]249/bins[.]sh hxxp://203[.]159[.]90[.]249/assailant[.]i686 hxxp://203[.]159[.]90[.]249/assailant[.]ppc hxxp://203[.]159[.]90[.]249/assailant[.]arm6 hxxp://203[.]159[.]90[.]249/assailant[.]m68k hxxp://203[.]159[.]90[.]249/assailant[.]sparc hxxp://203[.]159[.]90[.]249/assailant[.]x86 hxxp://203[.]159[.]90[.]249/assailant[.]mpsl hxxp://203[.]159[.]90[.]249/assailant[.]sh4 hxxp://203[.]159[.]90[.]249/assailant[.]mips hxxp://203[.]159[.]90[.]249/assailant[.]i586 hxxp://203[.]159[.]90[.]249/assailant[.]arm4 hxxp://203[.]159[.]90[.]249/assailant[.]arm7 hxxp://94[.]249[.]230[.]150/mips |
Bashlite |
| URL | hxxp://216[.]107[.]139[.]197/FABG hxxp://216[.]107[.]139[.]197/JTHQ hxxp://216[.]107[.]139[.]197/UBGH hxxp://216[.]107[.]139[.]197/HQUT hxxp://216[.]107[.]139[.]197/GFCJ hxxp://216[.]107[.]139[.]197/LIBI hxxp://216[.]107[.]139[.]197/UDYH hxxp://216[.]107[.]139[.]197/JZLZ |
Ngioweb |
| URL | hxxp://154[.]91[.]75[.]105/getinstall64 | ValleyRAT |
| URL | hxxp://google2oauth[.]com/google[.]txt | NetSupportManager RAT |
| URL | hxxp://91[.]239[.]211[.]89/init[.]sh | XMRig |
| URL | hxxp://91[.]92[.]240[.]109/test[.]exe | Sliver |
| URL | hxxp://193[.]148[.]57[.]10/88004f4d3e32489389ea[.]php hxxp://193[.]148[.]57[.]16/1109860002d645548e1b[.]php |
Stealc |
| URL | hxxps://almontm[.]xyz/file[.]js hxxps://almontm[.]xyz/api/v1/verify hxxps://almontm[.]xyz/api/v1/session |
KongTuke |
| URL | hxxp://46[.]151[.]182[.]157:751/download hxxp://46[.]151[.]182[.]157:1337/api/ps hxxp://46[.]151[.]182[.]157:2008/api/forwarder hxxp://46[.]151[.]182[.]157:1337/api/discord hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/38e194c0f80a05375977eadf123c7abb hxxps://cdn[.]privatefile[.]host/api/cdn/f/c4337bc932ec7ac0f8a1368cf444a003 hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/c4337bc932ec7ac0f8a1368cf444a003 hxxps://cdn[.]privatefile[.]host/api/cdn/f/79fa0ef13c04d252be3860c9ca8560fe hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/79fa0ef13c04d252be3860c9ca8560fe hxxps://cdn[.]privatefile[.]host/api/cdn/f/063935fd7849651eab889f519e9c7f64 hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/46f82cd809e6896a6a2a7b9349d2035c hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/063935fd7849651eab889f519e9c7f64 hxxps://cdn[.]privatefile[.]host/api/cdn/f/46f82cd809e6896a6a2a7b9349d2035c hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/73aa37e5d41cd5b21741ed115b761732 hxxps://cdn[.]privatefile[.]host/api/cdn/f/73aa37e5d41cd5b21741ed115b761732 hxxps://cdn[.]privatefile[.]host/api/cdn/f/38e194c0f80a05375977eadf123c7abb hxxps://cdn[.]privatefile[.]host/api/cdn/f/b4820d907eff50dedb47027e4e0a08bc hxxp://77[.]90[.]41[.]3:42457/api/cdn/f/b4820d907eff50dedb47027e4e0a08bc |
RapidStealer |
| URL | hxxp://178[.]16[.]54[.]109/lmix[.]exe hxxp://91[.]92[.]242[.]107/lmix/ |
Phorpiex |
| URL | hxxps://macos[.]certificates[.]ltd/apple/macos/installation/terminal/launcher | AMOS |
| URL | hxxp://192[.]162[.]199[.]149/Output[.]exe | AsyncRAT |
| URL | hxxp://162[.]215[.]218[.]94/install[.]tgz | Tsunami |
