# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: clickfucker

# Reference: https://x.com/sysopfb/status/2044101396656423267
# Reference: https://rmceoin.github.io/malware-analysis/2026/04/13/xorbee-rat.html
# Reference: https://www.virustotal.com/gui/file/8b3e7ff95401fc946fe7f6f592ac2088f9b262cb647e15e87c2fc9d9244cc4ce/detection

195.66.27.92:4444
195.66.27.92:5000
195.66.27.92:8080
65.38.120.80:8080
plein-soleil.top
updater-worelos.com
defs.updater-worelos.com

# Reference: https://x.com/JustWantToQ1/status/2045389790120432056

199.217.99.227:8080
65.36.120.80:8080
