-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathblocklists-checkpoint.txt
1560 lines (1411 loc) · 66 KB
/
blocklists-checkpoint.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
## hosts-blocklists
## domains-ips-hashes
## blocklists-checkpoint
## https://research.checkpoint.com/
## https://research.checkpoint.com/latest-publications/
# https://research.checkpoint.com/2024/inside-akira-ransomwares-rust-experiment/
3298d203c2acb68c474e5fdad8379181890b4403d6491c523c13730129be3f75
# https://research.checkpoint.com/2024/gaming-engines-an-undetected-playground-for-malware-loaders/
147.45.44.83
185.196.9.26
0d03c7c6335e06c45dd810fba6c52cdb9eafe02111da897696b83811bff0be92
6be9c015c82645a448831d9dc8fcae4360228f76dff000953a76e3bf203d3ec8
260f06f0c6c1544afcdd9a380a114489ebdd041b846b68703158e207b7c983d6
604fa32b76dbe266da3979b7a49e3100301da56f0b58c13041ab5febe55354d2
3317b8e19e19218e5a7c77a47a76f36e37319f383b314b30179b837e46c87c45
b1a351ee61443b8558934dca6b2fa9efb0a6d2d18bae61ace5a761596604dbfa
# https://research.checkpoint.com/2024/wezrat-malware-deep-dive/
connect.il-cert.net
il-cert.net
onlinelive.info
45.120.177.8
45.143.167.87
46.249.58.136
194.4.49.175
194.11.226.9
2cf3cd8b7df4e87ac17812511510a48be4a9546fed513b9204c7173364db7ae3
5c03ac7128fb6e8ad923897e3696e08c943f4c819e5c1bdbe3df2b5774692d3d
5e33c4a38c05f52918ffd4e49fd2d1b1a771010466ceb19eaf378daa02f71700
26f66196c463e6ec1f224d9f87c1f75d868c94bba5c8502b6cbe806e06614377
48a97f6aee23543909fc1b7341dff8aa0f1caba229d61d3b0de4e03df02b1ac0
66b08e55d11f49493118e8a6cab1bb5f1953b2a4784a38c64cf7ed02bf781713
629dc03888412ae39d50cc17d5cbe579f2a99be03e6af2f071e68b7226f891d0
4431b2a4d7758907f81fb1a0c1e36b2ce03e08d43123b1c398487770afd20727
84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad
898595a6646b94f9735442ae65deb5f5364eddf2a7008f66e9d7ee8b6c08c285
53055662aeca79a319c8c59194f25bae1b33eab1a39cf18e8daa3602fbca900e
b96fad26fba197302fd11e1771e996387b7b23c2560e08f20c69069e173c7fa7
cf12b2043a05729839a29ff4bd23b4088888da1153ca81040a6c048417254a36
e1a5696dcae33657fd0aa2d1e7a36b84c4647975dab3063ac2f42c19dae0a5a1
e37b95bb9bee64cc0313eaad8a0269493745f89413bd78b58bb3b479b36084ae
# https://research.checkpoint.com/2024/hamas-affiliated-threat-actor-expands-to-disruptive-activity/
bankjordan.com
dentalaccord.com
easybackupcloud.com
economymentor.com
economystocking.com
egyptican.com
egyptskytours.com
egypttourism-online.com
ellemedic.com
finance-analyst.com
financeinfoguide.com
finances-news.com
healthcarb.com
healthoptionstoday.com
healthscratches.com
inclusive-economy.com
jordanrefugees.com
jordansons.com
king-pharmacy.com
master-dental.com
microsoftliveforums.com
microsoftteams365.com
microsoftwindowshelp.com
printspoolerupdates.com
pushservice_api.finances-news.com
saudiarabianow.org
saudiday.org
suppertools.com
support-api.financecovers.com
theshortner.com
trendingcharts.finance-analyst.com
wellhealthtech.com
5.42.221.151
37.120.247.22
37.120.247.100
37.221.65.254
38.180.151.206
45.59.118.145
45.134.9.202
80.77.25.49
80.77.25.216
140.99.164.56
140.99.164.86
160.119.251.181
185.158.248.161
185.158.248.201
185.165.169.76
185.165.169.117
185.225.70.168
185.247.224.28
188.92.78.148
193.168.141.29
193.168.141.61
195.123.210.42
213.252.244.234
0a4397f7d5da024b10c778910d6db84a6ba0fc3375fe6fe9b470f7e269ddc716
02902a5e07a80aa56c24c6a8d4cca9fcfb32f32bb074f9c449cad5b3b18a070c
2abff990d33d99a0732ddbb3a39831c2c292f36955381d45cd8d40a816d9b47a
2d55c68aa7781db7f2324427508947f057a6baca78073fee9a5ad254147c8232
3b4ee3d5c1a7202b053159becac4d0b622641e2e4a7b27f339c03a90f287d381
3d2409c7834287178f61116c9b653e3520172a10ebef58f58f99d27a34b839bd
3fc92e8a440ca16172f7d93bd9de3c6f9391e26d3a1cb964e966ee1ee31770df
5b7e8e685f6ee6b4810ed94b4420e08a10a977516b47fea356173cfaec2c41a0
5d773e734290b93649a41ccda63772560b4fa25ba715b17df7b9f18883679160
5fa809c0e5dff03bd202b86cd334e80c7ed5dbad9aed7b12a3799ea0800e5f31
6ab5a0b7080e783bba9b3ec53889e82ca4f2d304e67bd139aa267c22c281a368
7c0a8d3dec1675fd8ba0a73fb5b8eee3bef0214aa78a7aab73b8ba9814651f9f
7e0d0f77fe1dcb1e7a0a0a2fc0c25a68eee551c7045935449ae64dcbd1310958
8ce87eefded0713c9258f8f2086dcc51028fb404ceb526f832df4c93108c8146
9b2a16cbe5af12b486d31b68ef397d6bc48b2736e6b388ad8895b588f1831f47
9fc4c7cdcaa3c3c03ba65f138386e875d02f7fcaf10de720dfde20167e393f38
9fe7b2f4c17dd0c7a00aaa6a779c30e2cb3faa4b14766e02f616d00e6f6e9007
26cb6055be1ee503f87d040c84c0a7cacb245b4182445e3eee47ed6e073eca47
75c2fb3ae08502a57c8c96ea788ef946a8bb35fb4a16e76deefae4c94fd03fd7
76a543a49e46ad9163b2a06f6cea7a5e8eb5183cd3213e64446a8c66310fac3a
795b997c248b2f344f813cd0c15d3d435e6218c91d0f0f54a464d739feead4c5
8818c7c2cbd60521b8eb59ff9a720840535651343b30c1b279515d42d8036a8a
41112f36fc17f57f0e476c9ffa9e1ecbff796dc31a7ff0372d0d8708a5e9c50b
86791aa96bac086330bf927ea5c2725ff73aaedfadc2571f4f393aa4d3a6b690
2700142c0b78fdbf3df30125a72443e2317d5079a01ff26022a66d0b7bd4c5b1
ac227dd5c97a36f54e4fa02df4e4c0339b513e4f8049616e2a815a108e34552f
b7c5af2d7e1eb7651b1fe3a224121d3461f3473d081990c02ef8ab4ace13f785
b447ba4370d9becef9ad084e7cdf8e1395bafde1d15e82e23ca1b9808fef13a7
c068b9e7130f6fb5763beb9564e92a89644755f223b2f65dc762ed5c77c5b8e3
c22f0544e29c803d2cacbca3a57617496e3691389e9b65da84c374c90e699433
c51952f2caf55b455e7c7eb8048422bb477e3a616cb68f6fa524e15892b9f328
d3a53be1f64325c566bb71222b3747da81439dea8fc9a458fb459355cfa9e7f2
e2ba2d3d2c1f0b5143d1cd291f6a09abe1c53e570800d8ae43622426c1c4343c
e6d2f43622e3ecdce80939eec9fffb47e6eb7fc0b9aa036e9e4e07d7360f2b89
eddd40d457088d8384784ce80eaf0aefb1485776e0916e60781befbd739d4608
f2de8a5daed043ef3ab1f52156a4f7ff8f9a382f7f58ace6abb463f5cbab060c
fca0b3e57b3f9a14d18c435e564fe6db3620ba446e1b863737a9b36cbcc7251a
# https://research.checkpoint.com/2024/massive-phishing-campaign-deploys-latest-rhadamanthys-version/
15.235.138.155
15.235.176.166
95.169.204.214
103.68.109.208
139.99.17.158
198.135.48.191
0a3dfe260dd7b038ddb8911689c899541391c188aff966261e7bd9d0280d153d
0ad65fd0897a6547f6febf398708ab2d423a8f8834b53136219cb490ec3ebd13
0b9bd95d815af9ea4a59840ef6fcdc7ccfd0e239c40974334cb4cfb41df530db
0de8d2d3217cebd37a2fe488713d1c288ae5a63d3d3b2a3495e2e636ba6a1f89
00fc4b8a4c65c06766608f3ef3f92385c8e147f5991dabe290e33dd14b39ad44
00086cf4f35b6fb7f897cfa2f0d5ad9876aa9819cdc87416c798005ce901d3a1
05e02f0f9b8625fe3959ae1219f31b0167d787fefc0a9d152edf6524d6859590
1a2399ecc38f3288206c75b55762d125d3d75254062a2c0d85c86e7f896736ac
2a276ca5b2e095cdac7b24e58b3f7a67cee7db2fb5c1568e4775909265c7e914
2aa58fa8d71bd2b4fd1ffac16a6461191bbf6f4b2c97455ae52800cce929a0f2
2be6ad454fa9e87f78dea80d2855f1c14df81a881093a1a0d57f348377f477a8
2cbc1e8a4cb5d18a867666adbd3417bc88d48a74ae6500593959aec1a1c92d2d
2e0c99758432a3759b5af6f190ec5cb72a5a84c977d8883dcf041c4de003f3d3
3ca87045da78292a6bba017138ff9ee42b4e626b64d0fee6d86a16cc3258c8c3
3d010e3fce1b2c9ab5b8cc125be812e63b661ddcbde40509a49118c2330ef9d0
3de252c9023bc8920d77570acdfe21813532727af3f91d59af35fa8abcd3700f
3ecf2838b2e07e6d329d45cde7d0162ba47fea4b94bacb24838358314daed756
4b33219c5cadb4d741044874f6f0184d45f43891d28ad5b489716d4da21310fd
4bbe0f6b5488a51295b15d8144d0a1c9b41bb86384299b88ea48e88c76704f52
4cbcfa2a8d56976eff1e8ac0ef4d7703d0b802f227975a0cc36f3dcd3a90e73e
4fd469d08c051d6997f0471d91ccf96c173d27c8cff5bd70c3f2c5008faa786f
5cec33e8f47855da3c4ce1f3953d750275864714b16e08a94605bc3889867caf
6de4f65b1d738d84f8e825613092bbd360194195fe8a1c986e12a9bb704217c1
7d7a3e254b7968400a301d83fcd44a69f655386b9b95998a36113cfb2e542720
7dc07b8aa268485e40ab78bfbb03a367d80ebd7b2c6c74961dc6842cae7086e1
7e270a80cd0f04f245309e8c75cfc2cb46dc075ba01a00b30f66cb8b5deaaf3f
7f99e506c17676b98dcc08e6a19f100ef933cde3e0423c6d4072f6802a9196bb
8d0b1174cbda6b102bb98c91ba123e9f404b9fad23b49a4e29f3cfd8d20a577a
9a249dfdc2c16700bc5add2455f2ed00e47a2610b7779cc33e40aac576a2a74d
9abf9fb94e2529d8819a3873f2025bdd90d14e75fe4af81e489f6d0560809f9c
9bdf49b27fd4d80ef087f63e0bfa0a0822686814863eca09ac506404ad76dfda
9d10835f7717c89d17886b7e59cc2dfc9133bfaa044bad5f070e1c8e1212e257
9ef9c88cef51ee0fb77ea9a78dbe60651603ef807ddb6c44d5bda95cc9026527
10eafd75429ffadee2384acd37b0d4e7ca26b83666e6786f2acaf1b1c29c3f17
11ba24d023b544e28c37b6cb8afe27d06638175d7f56c2e4d4ff97bf7bd813b6
12b7390835f30c1bcdeddd258e49684c98133cee4a6a2ccab869785567deae4f
24ce42c2fd4a95c1b86bbee9bce1e1cf255bd0022e19bab6bd591afd68b7efdb
41a3edb3a8e8d5cf093cbd02791911f6ee26df39a377fceb6b101d66a7b7aff2
44f3936ee158d2846664bf5cd795fd90a99441186b20b90ff241ba1b38a6a3e9
48aaa2dec95537cdf9fc471dbcbb4ff726be4a0647dbdf6300fa61858c2b0099
90c7688e0dc23ba4530bac1d567bad920c4ef1c06cbf4b2d867eeb363271eefe
98e28d3423f5d414effe3c0ed6fd0f1c8154942e5e127ecee5f051e1196ffc75
99c0bebdc8cb7b0948000a601f510fc70487f9da532be199b8641512a2db9839
219a6387d91c4b2c8e91c8613192af950bd9c790114a238eb0e1e7c878f6e728
258ffcc13dbe110bcce21b91f7f075995719791fdd3c9f55ea5934984fa4373d
324dfc7bb75f27e6fba8d67dea67a63525efbe947bf8e29ef39980c6efc1c3f6
342a5c7df2bdd040570f4b83c74366d4c96a90d6418149d432cb5e8577f2f6b1
415ee9b12002f17ca4f36bef794fdb19884e22980e21bf8a15043258624c439b
416f3fa48b75ab168e3373dae77cab7f4702de5158835d23a02629e8c1d20156
623bb3f1f476c37afc309d6c0ab89e216aaedc03b8a7ec1aaec5fb5085d78a97
633b0fe4f3d2bfb18d4ad648ff223fe6763397daa033e9c5d79f2cae89a6c3b2
741dfdae8948f3e430a5b7b66c8fb4b8a750695b67a84a12abc0b6089e8fba31
751f149665f87dd20cc8dff743f28e5da1ff2a5f04874d4b8569b9afceeedfec
783c7f4bf23072343f6247ee14e54e4af0b147553ad1ef42b4e7fb44386d667c
865a4f2583679f7a40357b61301d75567cf516a5b8295dc8155e6d4aa2ce244a
970e199e40511e90d6dd5d6f3c9f3701215fd881b1273fe2617bd44444b0bee9
2625d99af56c79de32f9fba2332f63eb9c88707e9ea83985bce5df9022ced99a
3648e89e7449ea433a8b3ef0e5b605b5dc4157048c03b20dedc5e3b920fa8552
5418e42706bca4712ff2a3db67853eb42a2310660c51cff2f9020586cffedeb3
6044e08402d1abd52991f5c6a4749ba6aa29a0587ff196edf60b38862392e855
9102e564c3262b2c291e8ca3d67f8a55c06650aa86f617c919916f6053c03c9b
9327aa03760431b6d86eeb2f1a3efc36aa443b842b5116fbbe0f2a7794c4e70e
18273fa35c54332d8763cb17a5ae92de5636f3a05c507ce18d9d6a77c3139deb
78200cd816acbd39b6664c6582e06500f6d46085b62b49d2f914bea5a004197a
97286b6f3a6535ff1172ef65172e6967e3670c6b14a3313c3bf0d6c171b1fc85
878917b6a8d241031fc330eff771f416a9fffaecab42c39d57e58ac2d8f38f11
3737501bbd4abd0844da016c0263399e3c670ae52952b30ca46c6c96cf4e318d
6012386eab453f4fb1cfb88fb5b05ba9ec71a838029ea51bcff4c0b5a2fbfad2
13872271ee511aa83f3f27d5db248516652b10a079ad01f78ed734cd2a87ec77
37438095a5e7be0ce12997dc23d1ff117912989d2f24beab95284f9380f65834
69573694d16b7ccadfa208ff976bfe1b3e36837aba3e5dc4dfc80e66341ef61e
3448005600ccb0ae52443a4c227a657de9cd767b389e9a1ed75ef074709981bd
7990765022c4400a45f996046971b9e6b69cca5b06f8d2adb61bc267fd362197
a03d2956ff8d0ae4d96c9e6cced79b335b70eef10feb0f7202609cb8652179f6
a064bbc4b58642ab4d7118abc55fb81db6584cbc633800ad14048e8370a95ef2
a15d0aedc8b4e54a170b6ecc3d9a06835cc499f07b05c6ca261081ace505debf
a9896a8f96407a5eedda08a63dd40967f0fe0b3926e7002b6e1abc11f6ab81cc
a905226a2486ccc158d44cf4c1728e103472825fb189e05c17d998b9f5534d63
a8729621ca4310e8e1a7ad3e1426708f1e1954a16af420cd3ce46c501e9692ab
a72083974e886856b7d985bdc79888234c8cd9012ed39b2566851fb0d86cca50
a87032195e38892b351641e08c81b92a1ea888c3c74a0c7464160e86613c4476
aa04c9307a9087455d21dfac02d7f322ab337cd5978f9161285a9c79379efecc
aeba4ece8c4bf51d9761e49fad983967e76c705a06999c556c099f39853f737c
b1ac4ad92045e935c132214015188d27ec4382f930d0152dfb303695b708b38d
b9c4c8343ba75081954b2db54940585c6c0c9bb47e053ac1b9229b4fa8fc9293
b97dd0279e112e0591b38064f59077102ab188b07a069cb104e66e4756e2570a
b529c6df6164ff8badf30f942220a3126f99e3fc2c2ea1494aa3e305b3b53c1f
b936853a0c50a0cd0bc8b33103b55bd88e19c6c28768d990b954c11d714286ca
b2588061ba5ee9948bbccd320b40c6d7b8d6a693d181f3bce61e5e267f53aa7e
b36205464ead176a473ab43ea7b5e0c2b8749b3eb9549d65609be2337dce25db
be9c3feed5f6e81ccd375902c8c92616f77694b6cd14f69896d44dd4b1ea4990
bea558e8129fcb647e6f42c8beda4464e109dd3cd546342c0337dbd50616f991
c0b319bb19092fe3c193e5139fcdf599502b669143b06c676e81f46ab50fb4ed
c5bb808a88f9e729484c05a1bc3097157bbfbd28469e502f2ebc4c6e6135df42
c622c0f67eb5d9a90008e5e120065cd5a1a6e25c6e758e8205d377596059b8fe
ccb539bf17d479d9707ee717d0afb03cd57e9b6f023becf1abf9cdbd88e1b06c
cd3040c88a6fd71ed1ce8c2a5d0b13ed8e25e49835932a39891c514ef946dd29
ce2f00f1d0e71287e746d5a3507547f355297a3e45a7c2cc0322015916a0137c
cf9d93951e558ed22815b34446cfa2bd2cf3d1582d8bd97912612f4d4128a64e
d0e3f547e3efcc9d9794774a765b9c3950955e7ad752f3e630ebd5ab9425bcdc
d00d3adf81bf95ff4994dcbd2ae1305a6ee6b0edfad6eb55b87217f85645651a
d57f45096e646837dec51129222fcbe79981c595721164009aec68be09bf5dcf
d96ec4b08c08b81ba9075423d5e83bf330de09866066b4bdb459bcbac389a350
d97aa65123c26509e3fc1a9963962b7f707a50ddca44a9a12fd03e654ab5aa66
d285677cba6acf848aa4869df74af959f60ef1bc1271b4032000fcdd44f407f2
d452461f3527d674de3e9b680026ceb2b02c56d6d3f7c94da3aab65c05f52c03
dbb4f7e6354621c316fbba7e7a15f59cf229684e16ab6d21027f310beecaf49b
dbdeede6f39936305c4c5bd8e4f7bfccb0b823c025130e7f8fa285e80383be0f
dc3d72f72247141efeba3c2ffd498025f68e0c4b34c9a4dc2686ffec09b6d401
de933f7b47707f4bf8d5a4aaef8b31f5059d3b8f465bcaae3e22438466e8390b
e8aa9a061c6ea803faaf4c8d7a80c6886b4ee73d9a89a9dc6e87e3fecf7a6851
e9a18755312011e30081e7ce0fcc1db3e3aec3b9f3ed3a776dd38498830a2738
e6315b24e0311758da1c25daa5f2724da4f534ed7ed644cbf43f3cc64c4676a7
eb4e39d44ad016b8d6d1dc8dc25a9ea3d3e18df87516922fdbd995de15b68f54
ebd167ca477af620065548a9e55567682b0750625b3e078fc4498dd5adeabdc6
f4fcba1c9d7f4ae8e3868f901035ea1e0e9e1122a362a83afd3d111c17a97d7a
f7eef906c7dc1ce2ffe586d4b7f316a5f5c6761b5cdbf22d892fbc87a5ee2f6f
f2429f4bd09897653d0ffa41206a14cafa55356d5edc04dc0915c116867f8c27
f2536e520d37512d868a418797974a5c11e67742824a5477100b7e3f5b2efbc3
fcb00beaa88f7827999856ba12302086cadbc1252261d64379172f2927a6760e
fd9fbfa809450415e8d0d79199ec8686cb7071d6e13a5b76f0ce1b03a2a61302
fe55c1d263e0ea356d86afd8b2b1cedff570568e45b8a3810e05ea482b8a9329
fefba5ce20c71a71cfe35dd8ff06c514bf6ffde60356babf4f4bba66dd904b78
ffb264a19af7c8a8dd5357b62c45fcd3063ca946aa2710740c4e8b21f8e697d9
# https://research.checkpoint.com/2024/the-evolution-of-transparent-tribes-new-malware/
38.54.84.83
64.227.134.248
83.171.248.67
84.247.135.235
143.110.179.176
0cd16d0a2768b9ec0d980ccf875b2724
009cb6da5c4426403b82c79adf67021c
0673341ccceeace3f0b268488f05db80
1bac7ea5a9558d937eaf0682523e6a06
2b1101f9078646482eb1ae497d44104c
3a2c701408d94bbcdcf954793f6749bc
7ecaa3c5a647d671a9aa4369d4a43b83
16ea7ce77c875a17049e9607323d1be4
730f708f2788fc83e15e93edd89f8c59
795d1be0915ec60c764b7a7aa6c54334
8703b910ece27b578f231ce5eb1afd8f
47990d1df44767ee3a6c4a6673ee76e9
58643299e340ae7b01efc67ef09ed369
ab127d76a40f1cb0cfd81ba1e786d983
af2ec3dcfdbb7771b0a7a3d2035e7e99
b9d9e75a2e6b81277f2052a1f0b14e45
b54512bf0ed75a9f2dee26a4166461a2
d3fe72a3b9cb5055662e6a0e19b8f010
0c9400e6b8c9244fd187a9f021d0da0b70b6f6fd
0db24c0a4dd12e5fa412434222d81de8e2de4b3c
1fc28b9e902dd2a8b771b1dc7ec3a62ad04fb02b
2e8139275a48cd048c21e1942b673ae0781dd0b8
6ac91c9e6beeacd74c56dfde9025e54e221b016c
43ac372b9cd05eefae3f50a0e487562759f3b0d9
86afc3e8046dfff3ec06bd50ae38f1da7797c3e2
88fd8d71d879257b6cbf2bc12b6493771b26d8a0
115e612a4e653cd915d5fc07246a00369fe38cde
549d80d0d2c3e2cf3ea530f37bfc0b9fe0cbd5f4
b09d059e8d6b87f3a6165e4d71901187d0aa99d5
b7814d9f6f2096f5a9573ade52547a447eff33bb
bc62b98437abd81a1471633afb9cff5dd898cdf8
c4c9aaeb74782cd9b5b8701d46e55cf299277215
e5377172ee4bae1508405370ee41bee646837c04
ee3162e649183490038da015e51750f23ae18d0f
f98019e637a2ae58d54ff903770b35eefb106432
f7424286b6b5f8dbad86856ef178745e34c8e83a
0a52c0ac04251ac1a8bc193af47f33136ae502b0c237de5236d1136acc3b1140
06d9662572a47d31a51adf1e0085278e0233e4299e0d7477e5e4a3a328dea9d1
2b6a273eae0fb1835393aea6c30521d9bf5e27421c2933bfb3beee8c5b27847e
6f839ded49ebf1dad014d79fbab396e2067c487685556a8402f3acdeb1600d98
7e04e62f337c5059757956594b703fc1a995d436c48efa17c45eb0f80af8a890
8d552547fe045f6006f113527eb5dd4a8d5918c989bf11090c7cb44806d595be
60b0b6755cf03ea8f6748a1e8b74a80a3d7637c986df64ee292f5ffefcd610a2
70bafcf666e8e821212f55ea302285bb860d2b7c18089592a4a093825adbaa71
263f9e965f4f0d042537034e33699cf6d852fb8a52ac320a0e964ce96c48f5e5
308c84c68c18af8458ae61afe1f2eec78f229e188724e271bd192a144fd582fc
348c0980c61d7c682cce7521aaad13a20732f7115cb5559729b86ca255f1af7f
6296fb22d94d1956fda2a6a48b36e37ddd15cf196c434ab409c787bf8aa47ac3
a7fd97177186aff9f442beb9da6b1ab3aff47e611b94609404e755dd2f97dce8
b9e10e83a270e1995acaceb88ce684fb97df6156a744565b20b6ec3bc08c2728
b30a9e31b0897bfe6ab80aebcd0982eecf68e9d3d3353c1e146f72195cef0ef5
b41e1d6340388b08694ae649a54fa09372f92f4038fd84259a06716fa706b967
d66ba4ee97a2f42d85ca383f3f61a2fac4f0b374aad1337f5f29245242f2d990
dca78e069bfd9ca4638b4f9cb21dff721530d16924e502c03d8c9aa334b7ca0d
# https://research.checkpoint.com/2024/disinformation-campaign-moldova/
cert-pl.pl
comunicacion-presidencia-gov.es
comunidad-madrid.es
energie-gov.md
eupm-moldova.md
europa-ec.eu
europa-eppo.eu
europa.social
europa.study
freepresunlimited.org
golebewski.pl
gov-md.com
interior-gov.es
isw-org.pl
ivention.pl
litexpo-portal.lt
mailgon.online
mailorun.su
mailos.ru
mc-md.com
mcgov.md
md-mec.com
mec-gov.md
moldova-energie.md
moldova-mediu.md
moldova-social.md
nask-pl.com
nnmnnm.ru
noname05716.ru
otllook.com
pass-check.online
sapsap.site
social-moldova.md
socialisti.md
socialistii.com
sso-log.com
te-storg.com
urm-lt.com
viilnius.lt
vilnius-summit.lt
45.143.167.163
51.38.145.50
62.106.66.90
176.124.33.59
185.255.132.69
194.61.121.74
194.61.121.131
0e295605cfb9d922ff94d38cad5743da9e3d7d8feddee7b42ca3e2314133a0f0
5c34498dfab981a4d9fb2b898d4e965ae7378e066bbf01ae29bc61adf1a66b2d
9a06192d3d922b1e4c404d2c9bac43d3315040635c472257c7a28f51b078ccfe
b5455bda6a6dc166f548e6c686e1881314ed079a91232d5b3e3f955b0229484a
c8c3bcdb856b9acffa853124ed13a0cc96641691233004cbe9bf8e018edb8f1b
d1b285fbe249349ae167052d81b4ab5d7e78c14e1ae617ef0985cc101a119d82
fb9105dc73a52d36a612157536322a7d3630c813f6acf1b997b370cfd768118c
# https://research.checkpoint.com/2024/wallet-scam-a-case-study-in-crypto-drainer-tactics/
cakeserver.online
connectprotocol.app
mestoxcalculator.com
web3protocol.online
42330ccaaacea8a18794c7e9fad100de31ea415bff7821e407b9ac70ef690032
bf557e975733c113acc38daa18ca1849a1022b4c30b118899f68210cd3c7f990
ea526792150e71402f896ddaf1f04aedcb1356aea3bfebbcaf6c90bcdde7aa0c
# https://research.checkpoint.com/2024/iranian-malware-attacks-iraqi-government/
asiacall.net
iqwebservice.com
mofaiq.com
spacenet.fun
37.1.213.152
91.132.95.117
151.236.17.231
185.76.78.177
194.68.32.114
206.206.123.176
0f9d0b03254830714654c2ceb11a7f5d
1f1aaaf32be03ae7beb9d49f02de7669
2badde184d78ed901b4b2282b285717c
4F4A06F63D34881D88CD70552E909748
7b62b055285b1c08e11ac98b3d3954bc
8afdfd6d035b3c616dc37894a15206b4
58e67cdc9ef57805f45ba554bdccb3b1
70ff5d4fc9957abff4c5577e22b3da27
79cc8730d748a884cc666b95ee9fed36
85f025474271fbcc43af1e2203d10b66
66126dc088be2699fd55ae7eff5e6e15
a70a7cfae52304a36fe1547b5a441d7a
a79e4424116dc0a76a179507ac914578
b1c93c7f5d89996d64a7f933f138e8b0
b5de3c4c582db7c2d2ce31c67cba0510
b817309621e43004b9f32c96d52dc2a0
d56b5fd6b8976c91d2537d155926afff
d542b320b10d443a454c305e9818f5f6
fb164cdf119b0d4427bdcb51b45075b1
# https://research.checkpoint.com/2024/unmasking-styx-stealer-how-a-hackers-slip-led-to-an-intelligence-treasure-trove/
playerenterprises.org
styxcrypter.com
9ea494b525c4676e63f943e2d1dba751c377b9138613003c80d14ddfaed6883e
# https://research.checkpoint.com/2024/stargazers-ghost-network/
considerrycurrentyws.shop
deprivedrinkyfaiir.shop
detailbaconroollyws.shop
distincttangyflippan.shop
greentastellesqwm.shop
horsedwollfedrwos.shop
innerverdanytiresw.shop
lamentablegapingkwaq.shop
macabrecondfucews.shop
messtimetabledkolvk.shop
patternapplauderw.shop
relaxtionflouwerwi.shop
sideindexfollowragelrew.pw
slamcopynammeks.shop
standingcomperewhitwo.shop
stickyyummyskiwffe.shop
sturdyregularrmsnhw.shop
understanndtytonyguw.shop
vivaciousdqugilew.shop
89.23.98.116
147.45.44.73
147.78.103.199
185.172.128.95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# https://research.checkpoint.com/2024/new-bugsleep-backdoor-deployed-in-recent-muddywater-campaigns/
airpaz.egnyte.com
airpazfly.egnyte.com
airpazflys.egnyte.com
alkan.egnyte.com
alltrans.egnyte.com
bgu.egnyte.com
cairoairport.egnyte.com
cnsmportal.egnyte.com
downloadfile.egnyte.com
fbcsoft.egnyte.com
filecloud.egnyte.com
fileuploadcloud.egnyte.com
gcare.egnyte.com
getter.egnyte.com
kinneretacil.egnyte.com
ksa1.egnyte.com
megolan.egnyte.com
nour.egnyte.com
onlinemailerservices.com
rimonnet.egnyte.com
salary.egnyte.com
silbermintz1.egnyte.com
smartcloudcompany.com
smtpcloudapp.com
softwarehosts.com
5.252.23.52
31.171.154.54
45.150.108.198
85.239.61.97
89.221.225.81
91.235.234.202
95.164.32.69
141.98.252.143
146.19.143.14
146.70.172.227
169.150.227.205
169.150.227.230
185.248.85.20
193.109.120.59
194.4.50.133
198.54.131.36
200.200.200.248
0ab2b0a2c46d14593fe900e7c9ce5370c9cfbf6927c8adb5812c797a25b7f955
02060a9ea0d0709e478e2fba6e9b71c1b7315356acc4f64e40802185c4f42f1c
1c0947258ddb608c879333c941f0738a7f279bc14630f2c8877b82b8046acf91
5df724c220aed7b4878a2a557502a5cefee736406e25ca48ca11a70608f3a1c0
7e6b04e17ae273700cef4dc08349af949dbd4d3418159d607529ae31285e18f7
7e14ca8cb7980e85aff4038f489442eace33530fd02e2b9c382a4b6907601bee
8fbd374d4659efdc5b5a57ff4168236aeaab6dae4af6b92d99ac28e05f04e5c1
20aaeac4dbea89b50d011e9becdf51afc1a1a1f254a5f494b80c108fd3c7f61a
39da7cc7c627ea4c46f75bcec79e5669236e6b43657dcad099e1b9214527670e
53b4a4359757e7f4e83929fba459677e76340cbec7e2e1588bbf70a4df7b0e97
55af6a90ac8863f27b3fcaa416a0f1e4ff02fb42aa46a7274c6b76aa000aacc2
73c677dd3b264e7eb80e26e78ac9df1dba30915b5ce3b1bc1c83db52b9c6b30e
90f94d98386c179a1b98a1f082b0c7487b22403d8d5eb3db6828725d14392ded
424a9c85f97aa1aece9480bd658266c366a60ff1d62c31b87ddc15a1913c10e4
960d4c9e79e751be6cad470e4f8e1d3a2b11f76f47597df8619ae41c96ba5809
4064e4bb9a4254948047858301f2b75e276a878321b0cc02710e1738b42548ca
31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab
94278fa01900fdbfb58d2e373895c045c69c01915edc5349cd6f3e5b7130c472
88788208316a6cf4025dbabbef703f51d77d475dc735bf826b8d4a13bbd6a3ee
a0968e820bbc5e099efd55143028b1997fd728d923c19af03a1ccec34ce73d9b
b8703744744555ad841f922995cef5dbca11da22565195d05529f5f9095fbfca
c23f17b92b13464a570f737a86c0960d5106868aaa5eac2f2bac573c3314eb0f
c80c8dd7be3ccf18e327355b880afb5a24d5a0596939458fb13319e05c4d43e9
c88453178f5f6aaab0cab2e126b0db27b25a5cfe6905914cc430f6f100b7675c
e2810cca5d4b74e0fe04591743e67da483a053a8b06f3ef4a41bdabee9c48cf7
e7896ccb82ae35e1ee5949b187839faab0b51221d510b25882bbe711e57c16d2
f925d929602c9bae0a879bb54b08f5f387d908d4766506c880c5d29986320cf9
fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a
ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909
# https://research.checkpoint.com/2024/resurrecting-internet-explorer-threat-actors-using-zero-day-tricks-in-internet-shortcut-file-to-lure-victims-cve-2024-38112/
cbmelipilla.cl
22e2d84c2a9525e8c6a825fb53f2f30621c5e6c68b1051432b1c5c625ae46f8c
65142c8f490839a60f4907ab8f28dd9db4258e1cfab2d48e89437ef2188a6e94
b16aee58b7dfaf2a612144e2c993e29dcbd59d8c20e0fd0ab75b76dd9170e104
bd710ee53ef3ad872f3f0678117050608a8e073c87045a06a86fb4a7f0e4eff0
bfd59ed369057c325e517b22be505f42d60916a47e8bdcbe690210a3087d466d
c9f58d96ec809a75679ec3c7a61eaaf3adbbeb6613d667257517bdc41ecca9ae
# https://research.checkpoint.com/2024/rafel-rat-android-malware-from-espionage-to-ransomware-operations/
ashrat.000webhostapp.com
bazfinc.xyz
discord-rat23.000webhostapp.com
districtjudiciarycharsadda.gov.pk
kafila001.000webhostapp.com
uni2phish.ru
zetalinks.tech
9b718877da8630ba63083b3374896f67eccdb61f85e7d5671b83156ab182e4de
344d577a622f6f11c7e1213a3bd667a3aef638440191e8567214d39479e80821
442fbbb66efd3c21ba1c333ce8be02bb7ad057528c72bf1eb1e07903482211a9
5148ac15283b303357107ab4f4f17caf00d96291154ade7809202f9ab8746d0b
c94416790693fb364f204f6645eac8a5483011ac73dba0d6285138014fa29a63
d1f2ed3e379cde7375a001f967ce145a5bba23ca668685ac96907ba8a0d29320
# https://research.checkpoint.com/2024/inside-the-box-malwares-new-playground/
77c30d1e3f12151b4e3d3090355c8ce06582f4d0dd3cdb395caa836bd80a97f6
aefaf8401437262004d384c8f92968cfee9f5563d13c35b347c9f9eefccab7fc
c76d2e396d654f6f92ea7cd58d43e739b9f406529369709adece23638436cd25
# https://research.checkpoint.com/2024/static-unpacking-for-the-widespread-nsis-based-malicious-packer-family/
00042ff7bcfa012a19f451cb23ab9bd2952d0324c76e034e7c0da8f8fc5698f8
090979bcb0f2aeca528771bb4a88c336aec3ca8eee1cef0dfa27a40a0a06615c
3f7771dd0f4546c6089d995726dc504186212e5245ff8bc974d884ed4f485c93
12a06c74a79a595fce85c5cd05c043a6b1a830e50d84971dcfba52d100d76fc6
44e51d311fc72e8c8710e59c0e96b1523ce26cd637126b26f1280d3d35c10661
80db5ced294160666619a79f0bdcd690ad925e7f882ce229afb9a70ead46dffa
178f977beaeb0470f4f4827a98ca4822f338d0caace283ed8d2ca259543df70e
160928216aafe9eb3f17336f597af0b00259a70e861c441a78708b9dd1ccba1b
a3e129f03707f517546c56c51ad94dea4c2a0b7f2bcacf6ccc1d4453b89be9f5
bb8e87b246b8477863d6ca14ab5a5ee1f955258f4cb5c83e9e198d08354bef13
cd7976d9b8330c46d6117c3b398c61a9f9abd48daee97468689bbb616691429e
# https://research.checkpoint.com/2024/sharp-dragon-expands-towards-africa-and-the-caribbean/
dueog.xyz
schemas.openxmlformats.shop
13.236.189.80
38.54.50.182
38.54.96.97
45.76.193.171
45.251.241.12
52.236.140.86
103.56.17.192
103.146.78.152
185.239.226.91
da78602c2a4490d445706f8f111daba9519fece8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# https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/
64.176.169.22
64.176.172.101
64.176.172.165
64.176.172.235
64.176.173.77
74D8D60E900F931526A911B7157511377C0A298AF986D42D373F51AAC4F362F6
85FA58CC8C4560ADB955BA0AE9B9D6CAB2C381D10DBD42A0BCEB8B62A92B7636
87F0A902D6B2E2AE3647F10EA214D19DB9BD117837264AE15D622B5314FF03A5
40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17
CC77E8AB73B577DE1924E2F7A93BCFD852B3C96C6546229BC8B80BF3FD7BF24E
D0C03D40772CD468325BBC522402F7B737F18B8F37A89BACC5C8A00C2B87BFC6
DEEAF85B2725289D5FC262B4F60DDA0C68AE42D8D46D0DC19B9253B451AEA25A
# https://research.checkpoint.com/2024/foxit-pdf-flawed-design-exploitation/
0ADE87BA165A269FD4C03177226A148904E14BD328BDBB31799D2EAD59D7C2FA
1CBF897CCCC22A1E6D6A12766ADF0DCEE4C103539ADD2C10C7906042E19519F4
2aa9459160149ecefd1c9b63420eedc7fe3a21ae0ca3e080c93fd39fef32e9c0
3f291d07a7b0596dcdf6f419e6b38645b77b551a2716649c12b8706d31228d79
4EF3A6703ABC6B2B8E2CAC3031C1E5B86FE8B377FDE92737349EE52BD2604379
5c42a4b474d7433bd9f1665dc914de7b3cc7fbdb9618b0322324b534440737d7
9A7F4FF5FD0A972EEDA9293727F0EECDD7CE2CFE0A072CDF9D3402EE9C46A48E
9c5883cf118f1d22795f7b5661573f8099554c5a3f78d592e8917917baa6d20f
19A8201C6A3063B897D696330C1B60BD97914514D2AE6A6C3C1796BEC236724A
79e1cb66cb52852ca3f46a2089115e11fff760227ae0ac13f128dda067675fbc
87effdf835590f85db589768b14adae2f76b59b2f33fae0300aef50575e6340d
8155a6423d64f30d2994163425d3fbe14a52927d3616ffacea36ddc71a6af4b0
20549f237f3552570692e6e2bb31c4d2ddf8133c5f59f5914522e88239370514
a4a8486c26c050ed3b3eb02c826b1b67e505ada0bf864a223287d5b3f7a0cde0
A5C9A3518F072982404E68DC6A3DC90EDEBBF292FC1ACA6962B6CCF64F4FE28C
A334A9C1A658F4EBEF7BA336F9A27693030DC444509BD9FA8FDEFE8AAAE3A133
ac7598e2b4dd12ac584a288f528a94c484570582c9877c821c47789447b780ec
B3AD75EEF9208D58A904030D44DA22C59CE7BD47ED798B0A14B58330A1390FE8
b59ab9147214bc1682006918692febed4ad37e1d305c5c80dc1ee461914eacd2
c1436f65acbf7123d1a45b0898be69ba964f0c6d569aa350c9d8a5f187b3c0e7
d2bd6a05d1e30586216e73602a05367380ae66654cd0bccabb0414ef6810ab18
d44f161b75cba92d61759ef535596912e1ea8b6a5a2067a2832f953808ca8609
D761FE4D58FE68FC95D72871429F0FCE6055389A58F81CF0A19EB905A96E1C38
D5483049DC32D1A57E759839930FE17FE31A5F513D24074710F98EC186F06777
de8ecd738f1f24a94aba06f19d426399bc250cc5e7b848b2cbd92fc1d6906403
E9BF261A779C1B3A023189BEF509579BAD8B496DCFE5E96C19CF8CC8BEA48A08
e32d2966a22243f346e06d4da5164abab63c2700c905f22c09a18125ee4de559
eb87ec49879dc44b6794bb70bd6c706e74694e4c2bbc1926dd4cff42e5b63cc6
EE42CF45FFF12BCC9E9262955470BFED810F3530E651FDDB054456264635D9D2
f002712b557a93da23bbf4207e5bc57cc5e4e6e841653ffab59deb97b19f214e
FC330BB132A345AF05FEB0D275EEEF29C7A439A04223757F33360393CF975CA9
# https://research.checkpoint.com/2024/29676/
3d93b8954ed1441516302681674f4989bd0f20232ac2b211f4b601af0fcfc13b
bf830191215e0c8db207ea320d8e795990cf6b3e6698932e6e0c9c0588fc9eff
15412d1a6b7f79fad45bcd32cf82f9d651d9ccca082f98a0cca3ad5335284e45
98b5b4f96d4e1a9a6e170a4b2740ce1a1dfc411ada238e42a5954e66559a5541
a2c3073fa5587f8a70d7def7fd8355e1f6d20eb906c3cd4df8c744826cb81d91
ebdf3d3e0867b29e66d8b7570be4e6619c64fae7e1fbd052be387f736c980c8e
6302acdfce30cec5e9167ff7905800a6220c7dda495c0aae1f4594c7263a29b2
# https://research.checkpoint.com/2024/magnet-goblin-targets-publicly-facing-servers-using-1-day-vulnerabilities/
allsecurehosting.com
biondocenere.com
cloudflareaddons.com
dev-clientservice.com
fernandestechnical.com
miltonhouse.nl
oncloud-analytics.com
proreceive.com
textsmsonline.com
theroots.in
45.9.149.215
45.153.240.73
91.92.240.113
94.156.71.115
172.86.66.165
027d03679f7279a2c505f0677568972d30bc27daf43033a463fafeee0d7234f6
7b1d1e639d1994c6235d16a7ac583e583687660d7054a2a245dd18f24d10b675
8fe1ed1e34e8758a92c8d024d73c434665a03e94e5eb972c68dd661c5e252469
9cb6dc863e56316364c7c1e51f74ca991d734dacef9029337ddec5ca684c1106
9d11c3cf10b20ff5b3e541147f9a965a4e66ed863803c54d93ba8a07c4aa7e50
9ff0dcce930bb690c897260a0c5aaa928955f4ffba080c580c13a32a48037cf7
99fd61ba93497214ac56d8a0e65203647a2bc383a2ca2716015b3014a7e0f84d
894ab5d563172787b052f3fea17bf7d51ca8e015b0f873a893af17f47b358efe
926aeb3fda8142a6de8bc6c26bc00e32abc603c21acd0f9b572ec0484115bb89
1079e1b6e016b070ebf3e1357fa23313dcb805d3a6805088dbc3ab6d39330548
3367a4c8bd2bcd0973f3cb22aa2cb3f90ce2125107f9df2935831419444d5276
7967def86776f36ab6a663850120c5c70f397dd3834f11ba7a077205d37b117f
9895286973617a79e2b19f2919190a6ec9afc07a9e87af3557f3d76b252292df
b35f11d4f54b8941d4f1c5b49101b67b563511a55351e10ad4ede17403529c16
bd9edc3bf3d45e3cdf5236e8f8cd57a95ca3b41f61e4cd5c6c0404a83519058e
d3fbae7eb3d38159913c7e9f4c627149df1882b57998c8acaac5904710be2236
df91410df516e2bddfd3f6815b3b4039bf67a76f20aecabccffb152e5d6975ef
e134e053a80303d1fde769e50c2557ade0852fa827bed9199e52f67bac0d9efc
f1e7c1fc06bf0ea40986aa20e774d6b85c526c59046c452d98e48fe1e331ee4c
f23307f1c286143b974843da20c257901cf4be372ea21d1bb5dea523a7e2785d
fa317b071da64e3ee18d82d3a6a216596f2b4bca5f4d3277a091a137d6a21c45
# https://research.checkpoint.com/2024/maldocs-of-word-and-excel-vigor-of-the-ages/
107.172.73.137
192.210.160.112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# https://research.checkpoint.com/2024/raspberry-robin-keeps-riding-the-wave-of-endless-1-days/
07e5004a0a3a9129560237ab22d73f44d263204c5b6e15bbb7f17cd6171c87e1
1d5ae3117e171eab5919175c9fc677e872f1ef9f52e0c3c7ee4c3d858cd48a48
7e8315426befbcf3a2fca9a3ad4d0f072d9a184467ae7939920389b4a89f5116
189f22d5372806c1faaec4d89aaf8bc6837ce653281248d4fc90126d8a6755d0
537cb91a737213adaec1290188dd4ec6300166595dee034cf24f9080326a3b3b
571e6b37c9acea3add612769d2615f3ad1d2e151b08f8c6eace0cbce0461428a
697c15125b83c58c29d4235fd7b37c3f48c10630046be4952c220a4631acf05b
1235a8b1f7484da4a7efbae115f56b521dd3028b752786656498ec07e156f853
c0c92c3c7925965e6b1131e36d76c97f6719bb37c0cedbeab3e906bf600fcef0
c5d765b773684e851a180152516c45802098a6cd259b81ee4bd98b04607bd0ef
c6074b63c0ad279ae67a54677a8f037775c6dfbcf9085a0ff0c2a63245b60093
ca629b499a3a5cb52457f8f908bff3e5429f8574ba776499739490ff78e69094
eb12a5b640ef9bc07af0b59720e005cba41e7b3171ee3bdd9ecbc85b197586bb
eee7dac3cb9d776843bac9f2bbf633b72dd366adc66b78d34a6071d47f1bf007
f856db3dc69a1b816804a021e6e458ba4b3bf9a93e7fe2e0b57725ebdff1819d
fd0a3ec3b1564210e261892d8ceb51637380d0326387605bdccaef44a25221bf
fe8d7cb87345ad74b512ee0dd0bd597413d8f937b476e6d563a59125adc13158
# https://research.checkpoint.com/2023/rhadamanthys-v0-5-0-a-deep-dive-into-the-stealers-components/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# https://research.checkpoint.com/2023/israel-hamas-war-spotlight-shaking-the-rust-off-sysjoker/
audiosound-visual.com
filestorage-short.org
sharing-u-file.com
62.108.40.129
85.31.231.49
0ff6ff167c71b86c511c36cba8f75d1d5209710907a807667f97ce323df9c4ba
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95
67ddd2af9a8ca3f92bda17bd990e0f3c4ab1d9bea47333fe31205eede8ecc706
96dc31cf0f9e7e59b4e00627f9c7f7a8cac3b8f4338b27d713b0aaf6abacfe6f
d4095f8b2fd0e6deb605baa1530c32336298afd026afc0f41030fa43371e3e72
e076e9893adb0c6d0c70cd7019a266d5fd02b429c01cfe51329b2318e9239836
# https://research.checkpoint.com/2023/the-platform-matters-a-comparative-study-on-linux-and-windows-ransomware-attacks/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# https://research.checkpoint.com/2023/malware-spotlight-into-the-trash-analyzing-litterdrifter/
absorbeni.ru
acaenaso.ru
aethionemaso.ru
ahmozpi.ru
andamanos.ru
arabianos.ru
atonpi.ru
aychobanpo.ru
ayzakpo.ru
badrupi.ru
barakapi.ru
boskatrem.ru
brudimar.ru
credomched.ru
crisiumbi.ru
dakareypa.ru
decorous.ru
dumerilipi.ru
gayado.ru
geminiso.ru
heartbreaking.ru
hoanzo.ru
judicious.ru
karoanpa.ru
lamentable.ru
lestemps.ru
nahtizi.ru
nebtoizi.ru
nubiumbi.ru
ozaharso.ru
procellarumbi.ru
quyenzo.ru
ragibpo.ru
raidla.ru
ramizla.ru
sabirpo.ru
samiseto.ru
squeamish.ru
suizibel.ru
superficial.ru
talehgi.ru
triticumos.ru
undesirable.ru
urdevont.ru
valefgo.ru
vasifgo.ru
vilaverde.ru
vloperang.ru
zerodems.ru
1c49d04fc0eb8c9de9f2f6d661826d24
1da0bf901ae15a9a8aef89243516c818
4c2431e5f868228c1f286fca1033d221
9d9851d672293dfd8354081fd0263c13
42bc36d5debc21dff3559870ff300c4e
49d1f9ce1d0f6dfa94ad9b0548384b3a
86d28664fc7332eafb788a44ac82a5ed
88aba3f2d526b0ba3db9bc3dfee7db39
96db6240acb1a3fca8add7c4f9472aa5
495b118d11ceae029d186ffdbb157614
579f1883cdfd8534167e773341e27990
1536ec56d69cc7e9aebb8fbd0d3277c4
2996a70d09fff69f209051ce75a9b4f8
6349dd85d9549f333117a84946972d06
8096dfaa954113242011e0d7aaaebffd
2239800bfc8fdfddf78229f2eb8a7b95
83500309a878370722bc40c7b83e83e3
bbb464b327ad259ad5de7ce3e85a4081
cbeaedfa84b02a2bd41a70fa92a46c36
cdae1c55ec154cd6cef4954519564c01
# https://research.checkpoint.com/2023/from-albania-to-the-middle-east-the-scarred-manticore-is-listening/
4f6351b8fb3f49ff0061ee6f338cd1af88893ed20e71e211e8adb6b90e50a3b8
6f0a38c9eb9171cd323b0f599b74ee571620bc3f34aa07435e7c5822663de605
1146b1f38e420936b7c5f6b22212f3aa93515f3738c861f499ed1047865549cb
1485c0ed3e875cbdfc6786a5bd26d18ea9d31727deb8df290a1c00c780419a4e
3875ed58c0d42e05c83843b32ed33d6ba5e94e18ffe8fb1bf34fd7dedf3f82a7
7495c1ea421063845eb8f4599a1c17c105f700ca0671ca874c5aa5aef3764c1c
8578bff36e3b02cc71495b647db88c67c3c5ca710b5a2bd539148550595d0330
9117bd328e37be121fb497596a2d0619a0eaca44752a1854523b8af46a5b0ceb
67560e05383e38b2fcc30df84f0792ad095d5594838087076b214d849cde9542
2097320e71990865f04b9484858d279875cf5c66a5f6d12c819a34e2385da838
a2598161e1efff623de6128ad8aafba9da0300b6f86e8c951e616bd19f0a572b
b71aa5f27611a2089a5bbe34fd1aafb45bd71824b4f8c2465cf4754db746aa79
c5b4542d61af74cf7454d7f1c8d96218d709de38f94ccfa7c16b15f726dc08c0
da450c639c9a50377233c0f195c3f6162beb253f320ed57d5c9bb9c7f0e83999
daa362f070ba121b9a2fa3567abc345edcde33c54cabefa71dd2faad78c10c33
e1ad173e49eee1194f2a55afa681cef7c3b8f6c26572f474dec7a42e9f0cdc9d
f6c316e2385f2694d47e936b0ac4bc9b55e279d530dd5e805f0d963cb47c3c0d
f4639c63fb01875946a4272c3515f005d558823311d0ee4c34896c2b66122596
# https://research.checkpoint.com/2023/stayin-alive-targeted-attacks-against-telecoms-and-government-ministries-in-asia/
ad.fopingu.com
admit.pkigoscorp.com
backend.rtmcsync.com
cdn.pkigoscorp.com
cert.qform3d.in
cyberguard.certexvpn.com
eaq.machineaccountquota.com
gist.gitbusercontent.com
git.gitbusercontent.com
idp.pkigoscorp.com
imap.774b884034c450b.com
ns01.nayatel.orinafz.com
pic.rtmcsync.com
proxy.rtmcsync.com
qaq2.machineaccountquota.com
raw.gitbusercontent.com
sslvpn.pkigoscorp.com
update.certexvpn.com
45.77.171.170
45.159.250.179
65.20.68.126
70.34.201.229
77.91.75.232
136.244.111.25
139.180.145.121
167.179.91.150
178.23.190.206
185.136.163.129
185.242.85.124
185.243.112.223
207.148.69.74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