# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: lucidknight, lucidpawn

# Reference: https://blog.talosintelligence.com/new-lua-based-malware-lucidrook/
# Reference: https://github.com/Cisco-Talos/IOCs/blob/main/2026/04/new-lua-based-malware-lucidrook.txt
# Reference: https://www.virustotal.com/gui/file/d49761cdbea170dd17255a958214db392dc7621198f95d5eb5749859c603100a/detection

1.34.253.131:21
59.124.71.242:21
2fcc7078.digimg.store
d.2fcc7078.digimg.store
