# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/rivitna2/status/1852711030742196438
# Reference: https://www.virustotal.com/gui/file/e21cbdbf6414ffc0ef4175295c7e188800a66b7b83302bd35b7e3fd6fabfccde/detection

weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion

# Reference: https://x.com/malwrhunterteam/status/1853427671381803344
# Reference: https://tria.ge/241104-rlpyjstmcm/behavioral1
# Reference: https://www.virustotal.com/gui/file/20e0e61d27762a524f6974fb9f4995062582db351d5576e62a214d6b5e5808e7/detection

http://193.143.1.139

# Reference: https://x.com/RakeshKrish12/status/1949718334414471218
# Reference: https://www.virustotal.com/gui/file/db8c97dcb081136d1922c9246930b8ed2b13df8c88aaa7344cb6eb8eed07470b/detection

http://193.143.1.153
http://47.109.38.125
47.109.38.125:8080
/Ujdu8jjooue/biweax.php
/Ujdu8jjooue/
/biweax.php

# Reference: https://x.com/RakeshKrish12/status/2005545572179030478
# Reference: https://www.virustotal.com/gui/file/cc2a1859db5be78d0713bffa968d20fd65eb06287d89f4dd7cda0d4502b0a9fd/detection

http://23.235.182.105
23.235.182.105:33901

# Generic

/Ujdu8jjooue/biweax.php
/Ujdu8jjooue/
/biweax.php
