# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: linux_avp, cronrat, nginrat

# Reference: https://sansec.io/research/ecommerce-malware-linux-avp
# Reference: https://www.virustotal.com/gui/file/2d422affb9727b71b0e1610568bea8643892d99bdaed99269a10e7554c88437b/detection

47.113.202.35:443

# Reference: https://sansec.io/research/cronrat
# Reference: https://sansec.io/research/nginrat

47.115.46.167:443
