# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/Bank_Security/status/1121684114178883585
# Reference: https://www.zscaler.com/blogs/research/novaloader-yet-another-brazilian-banking-malware-family
# Reference: https://pastebin.com/4Rv8e7yZ
# Reference: https://otx.alienvault.com/pulse/5cc2d3013aefe2013f0974a7

32atendimentodwosgraumell.club
dwosgraumellsa.club
wn5zweb.online
http://167.114.31.93/gdo1.txt
http://167.114.31.95/gdo1.txt
http://185.141.195.5/prt1.txt
http://185.141.195.81/prt3.txt
http://185.141.195.74/prt1.txt
http://23.94.243.101/vdb1.txt

# Generic heur trails

/contaw.php
/contaw2.php
/contaw3.php
/contaw4.php
/contaw5.php
/contaw6.php
/contaw7.php
