silence-is-best · November 1, 2023 17:49
diff --git a/gistfile1.txt b/gistfile1.txt
 Date,Details,Email Payload Type,Users Targeted
 10/1/2023,FW: damaged Goods; xlam -> agenttesla continued to 10/9,Attachment,
 10/2/2023,RE: SHIPPING DOCUMENT & PACKING LIST; r15 -> agenttesla,Attachment,2
 10/2/2023,RE: CONFIRM REVISED PIURCHASE ORDER; zip -> formbook,Attachment,2
 10/2/2023,Signed Purchase Order: PO/US/4509622207; zip -> formbook,Attachment,2
 10/2/2023,Attachment name is Document.zip; zip -> agenttesla,Attachment,2
 10/3/2023,RE: New Order; r15 -> agenttesla,Attachment,2
 10/3/2023,Wrong Payment Information; zip -> agenttesla,Attachment,2
 10/4/2023,RE: Status For September SOA; xls -> agenttesla continued to 10/5,Attachment,4
 10/5/2023,Purchase Order - HOM-OS-20-23-813; r15 -> agenttesla,Attachment,2
 10/5/2023,Advance Payment for our order no. 28302-TF-03; tar -> agenttesla,Attachment,2
 10/8/2023,New PO NL/DB-078; rar -> bat -> agenttesla continued to 10/10,Attachment,3
 10/8/2023,RE: Purchase Order - 8730937.; r15 -> quaxloader,Attachment,2
 10/8/2023,Payment Advice; rar -> bat -> agenttesla,Attachment,2
 10/9/2023,RE: OS_PO#3210046374_SALE ORDER_INQUIRY_31032021; rar -> agenttesla,Attachment,2
 10/9/2023,"FW: REVISED RE: New shipment delivery product, ETD 09/10/23; r15 -> agenttesla",Attachment,2
 10/9/2023,Attachment names contain inv_; pdf -> js -> zip -> wikiloader -> ifsb,Attachment,246
 10/9/2023,DHL AWB#Tracking39098373; xz -> agenttesla,Attachment,2
 10/11/2023,PAYMENT/REMITTANCE COPY; zip -> agenttesla,Attachment,4
 10/12/2023,FW: Re: Open Invoices; z -> agenttesla,Attachment,4
 10/12/2023,Attachment names contain inv_; pdf -> js -> zip -> wikiloader -> ifsb continued to 10/13,Attachment,215
 10/12/2023,??: Payment; zip -> agenttesla,Attachment,4
 10/13/2023,Technical Inquiry for Manufacturing & Supply.; z|rar -> agenttesla continued to 10/16,Attachment,8
 10/16/2023,delivery order; rar -> agenttesla,Attachment,4
 10/17/2023,Purchase Order No : CO-04391 dated 17/Oct/2023; lzh -> agenttesla,Attachment,23
 10/17/2023,Payment Advice - Advice Ref:[A22D4YdWsbE4] / Priority payment; rar -> agenttesla,Attachment,4
 10/19/2023,Subjects start with ACH|DHL; pdf -> link -> js -> zip -> wikiloader -> ifsb atachments changed to inv_,Attachment,209
 10/20/2023,PO LGMS (PVT) Ltd; exe -> agenttesla,Attachment,2
 10/21/2023,QUOTE--GEI REF 2177700XXXXX023; rar -> bat -> agenttesla continued until 10/24,Attachment,4
 10/23/2023,RE: REQUEST FOR QUOTATION.; doc -> formbook,Attachment,2
 10/24/2023,NEW ORDER REQUISITION-No: STH0000514-3; rar -> agenttesla,Attachment,13
 10/25/2023,Re: Request for qoute; rar -> remcos,Attachment,3
 10/25/2023,RE: 4th Quater Enquiry for New Order; doc -> agenttesla,Attachment,2
 10/26/2023,Attachment name is attachments.zip ; zip -> agenttesla,Attachment,2
 10/28/2023,REVISED DOCS REQUIRED - Dept 9.; zip -> purelogs,Attachment,13

 agenttesla, 0331ca586f68e8a853e9030635f249dba8337da5ef7c29521c373807fcce1a6f, mail.cyber.net.pk
 agenttesla, 03eb475c31001a1695cf0dd132828e8455d43becb69b0cd6b3af6f59a06649bd, bengalleather.com
 agenttesla, 091982de7843b6d35b392a9526b3abf94b6a89a0455fa3f1ff1a18ab823c307d, mail.cbinet.net
 agenttesla, 09cab28b90799facd47c9a949855955c635efef849dd8896110e8376ff7f1458, mail.gcsho.com
 agenttesla, 0c2217b0e413d9557792e23cbe849eaac0d69c34c42dad168ab31e989591c8fd, us2.smtp.mailhostbox.com
 agenttesla, 0ee09ee5a382f01dfb53c94676b9c5676b1b82be91f46b6a2ffc1996c321a994, https://api.telegram.org/bot6521365373
 agenttesla, 18d2b8838dac4579e0dad6276b13ee43f4de3e85e61e631403b6e149d03ab197, mail.bengalshoe.com
 agenttesla, 1acf701fe129149fc33c5431899d83aa64fd31ad0b241ed83ea8ab1673eff6db, mail.fardarlogistics.com
 agenttesla, 21708c6374a6eb8422c9eae984bd00a8b8f436a27ef5e1946aab706fa38f30e1, mail.amtechcards.com
 agenttesla, 236fea80d391c6d642ec10a7710c6cf220610377441fc3ee5f2c1bfff0c01ecd, https://api.telegram.org/bot6406366928
 agenttesla, 246d6ffb502aa4b83300c5bb35e008e245ad36d243a83e6bdfee04eefdaac71e, mail.sofahaus.eu
 agenttesla, 28604f556f60165325c32dfa4a99efda916026618f0d61602fdabd858608fbbd, mail.cbinet.net
 agenttesla, 2994d5d9965778bf6d739ad76f95c3a9cb13775490e19fdda9e21634cd5f538b, ftp://valvulasthermovalve.cl
 agenttesla, 2cc15ff945b1d5856248237f3dca6a0657ae8cf58e95f497eec29011e5f2b2c3, mail.dayanbiotech.ir
 agenttesla, 3668bfda289003db294d1a1cd542ae1779810daab317fbed4165c1b422f20c31, mail.scandexbd.com
 agenttesla, 3bac14e1cf7531bfb5bc8f41a553df5f23bf6accb20e55bf14b498d781d61db3, mail.commtechtrading.com
 agenttesla, 4343245f1db76214093c4adefb0b167327c7bd49fa66608eccb2c4faadc3e32d, cp5ua.hyperhost.ua
 agenttesla, 437c9a84221317873865c1a2e61fcb6011dafff7afb646c482dfefb400da0186, mail.industrialgh.com
 agenttesla, 475adab8c1638c6f1c930d1a6e9715f7728052fb76407c5393b24adc2884c3f1, bengalleather.com
 agenttesla, 4ad5d7938a8d78d2529a72df4f8928c8be69d14e7366dc3677ae509925d08646, mail.hhipune.com
 agenttesla, 4bb1702e5b8ecbc4a91dd9d1ed77ebbdf0406b6712143b3b86c906a5709a05fa, mail.royalcheckout.store
 agenttesla, 4f286970516f49d9114010e3de523bdc7f13608d5c1b0f87b1a4c9ebaa5fcb6c, https://api.telegram.org/bot6195347596
 agenttesla, 4f73fe6e6ff093327306d6dccc38844c5aee07d008de3349a61c9b96259168c7, https://api.telegram.org/bot6522171090
 agenttesla, 4fa066bf81e73be8c55139382fba7c7c33fbf12d2a28a6d8d55e09f8b430190b, premium89.web-hosting.com
 agenttesla, 514b7b027e522406396244bfcd1bf8cdd60b967fd99bc9b8bce226dc0eb6e93d, mail.iaa-airferight.com
 agenttesla, 52a3b3a8d401e4f505e3b7e336ebd30af42823a1400711c5ea8482483eccd574, mail.amtechcards.com
 agenttesla, 5b5bbec5426595d0b6691f19add610017e667d14445e6d374c9c7e51ff1826cb, us2.smtp.mailhostbox.com
 agenttesla, 5c485141f97385046d2a64a4a93c1ad50682cd97e3e5cbe1b3f6e9e0472efd56, us2.smtp.mailhostbox.com
 agenttesla, 5f282e51360d29f2c0a4b8adf49357c28b2a6413fabf5fba3ac89d8e5ebdda79, mail.amtechcards.com
 agenttesla, 5f2d8658d5995ef397df2b732213bc26b55bfb95e9d02a83a339d6590c4ef089, mail.gimpex-imerys.com
 agenttesla, 63ed0ac5ef8a514cfe2d1dbb716ab354a07b770c62826978ba2a012905bcde9d, host2069.hostmonster.com
 agenttesla, 6490e5498bf6ca3c0b3cb40d581e019e8c4135fd8bc49580c30160f6b02450c6, premium89.web-hosting.com
 agenttesla, 649cbde56fbdaf2f52343c1c584fbe1357cf4be19264d7f31a21a6c7078ecf18, premium184.web-hosting.com
 agenttesla, 65c423ef88f86b07c5429ab4ebc8c89b7d6c39a032e8b7465f7b84bac91d3da9, mail.amtechcards.com
 agenttesla, 66835cb6c3d29e2492452fd43a1e552df65ece1b59a048f21dcf0a700f769db7, https://api.telegram.org/bot6379133890
 agenttesla, 6b57819398d3a6c1180a379d2f94f68e6074ae4a2e4275dc827465f0ab84d8b4, mail.amtechcards.com
 agenttesla, 6c83949ffec3d4b7b6ca9b809640068415a8cef56ed7c81528a616da7838a762, mail.cpbgdigital.com
 agenttesla, 6cc94af7278990c89ed746ebc99759dc7d847cfcdd3cd327d15988b489e3e59d, mail.product-secured.com
 agenttesla, 7527698e11a5f07d7a6c17f471943a9473857e724d394f043677eb59bf4dbf17, mail.bengalshoe.com
 agenttesla, 7590cb175c30e90638d9d0f168add1c0cb66d769917ebc3052a9235618a5582b, mail.amtechcards.com
 agenttesla, 7988501f67d983c87769531838a8554a2fa186c3bb5ea76b9b697491c81ed7a0, https://api.telegram.org/bot6362373796
 agenttesla, 7ce1ec80a206073fad757e02c83fed1341ca7df103082c3338bff11232f7b5a6, bengalleather.com
 agenttesla, 7faf63f792b8578c37597877a182f75415cb7f4995319007db641af4e7264f98, smtp.yandex.com
 agenttesla, 801001af8a75fe6ef6d54185561138dbb46588fa64cafec2564009e1b124b7f7, mail.asiaparadisehotel.com
 agenttesla, 801352e073b5e718021995a07e3506fd05b12ee410b69f242c1b9dd2917c30ac, mail.dayanbiotech.ir
 agenttesla, 820e1b2bff7decc1832bc8804a8329eb79278bcffce98a525fd12de46f89fffb, premium89.web-hosting.com
 agenttesla, 824068050121b62272bafa20abe9d10fbadadafc97a529754ec73d884eca5527, bengalleather.com
 agenttesla, 83b11e62d88278fd953ef2496d6e6217d314defc55f7ba1fbb4d0a00ec6651b2, us2.smtp.mailhostbox.com
 agenttesla, 8570c011be165d6c092c41db1f85d4c52fdca1812b7c9ee87420702c2776005a, mail.dynamicconsultinglogistics.ma
 agenttesla, 85d0e15fe8e747d9e299c7a0ffa20c51f563a9c74561d9198c8293f0a6497841, mail.gimpex-imerys.com
 agenttesla, 91ad210dae91d724c701330e1ce8fd5047b8ee7a475d1dcc1474a812cab351ca, premium89.web-hosting.com
 agenttesla, 937dab028a6d88b7b985465c62eb1257878a42b865b73cb745c5593d0b70b586, mail.hhipune.com
 agenttesla, 95146fd91e53797e70aa24b0a662c345ea9c0ed0500e9a996506d3c79433304c, premium89.web-hosting.com
 agenttesla, 95c4b47fa9c4b6ddbd71d3f7c46e3610a46a37c44b18782d8b1e104946f806de, quimicaobal.com
 agenttesla, 9886fa5dd072d4bb23ea5353ac0014d36b5425f49fdb0b315a2ed54cc5fcc33d, fast.nsjet.com
 agenttesla, 9acb3802e7f15ac9c240749ff8c3ebe7a7cd660bedf4b6a6a1edef4de714aa43, mail.commtechtrading.com
 agenttesla, 9b15faed8bf8fc81cdc6831e7e0c89a27419fae8940e1fec61471f93d18b225e, bengalleather.com
 agenttesla, 9bc899defa6d47d99cefedf9b92f85b819c1ef087e1c851e767da436cc402f23, us2.smtp.mailhostbox.com
 agenttesla, 9d0030c2c7fa31d81278dfb94e88e98dc04268cf6a3df23d98aaae875e40cb82, premium184.web-hosting.com
 agenttesla, 9d4040bf5689a6d0022bcd062cfd40c3d17601e4713cf424876a2b65680dcdbe, mail.amtechcards.com
 agenttesla, 9e2dee66caf6e9d222eb16b6e88b8d323b0513f95b85f3761553f286b596c944, mail.fardarlogistics.com
 agenttesla, 9e2f5bad6acb0454f71026526cb9d5d78985ef6e566b433b04ba7aba5b277ddb, us2.smtp.mailhostbox.com
 agenttesla, a0a83c6bc77fa73e06bc77a6bdd2e7d3b84319cff7f009d7f6ccc7fca5c48820, host2069.hostmonster.com
 agenttesla, a0fb662473509e8c430d1dde009a85acc2c0d57ccaba3b290380d1f3d4ab9457, host2069.hostmonster.com
 agenttesla, a1018f6e1828a26fe95f6a0c4ef3b1b55b13966fbfd11fecc41a1b295457253c, smtp.zoho.com
 agenttesla, a6608ce0f39cb1ee560bfdf8d7e421b093169b36c5db03b1a77be8296a6736ee, mail.cbinet.net
 agenttesla, a6ff3a070e5e8fcbf4d1da9ee062b9fd91e1773e17f27c86310b13747739fb2d, mail.elec-qatar.com
 agenttesla, a830eaba9888a6fa0a3cbf85da3636f1c41ae7a0372cbc5cfab0efd197894fc9, https://api.telegram.org/bot6311067514
 agenttesla, ae1a9131c9f7d3b5f261c4f95dc348076c1c0be47fcc1914a428e47576fb0b9e, mail.amtechcards.com
 agenttesla, af9373c37ef6f7cee66f69230dd4bf6f7773153af373f3485a387c0856ef5dbc, mail.cbinet.net
 agenttesla, b02b2ce7e00fcf9e36c4469bd68e3cd6812ccb39fd24a7beec8aec0f7b9e3287, mail.awelleh3.top
 agenttesla, b0dae00efdb8e3e23450b7c29f558a85a82f5a95fa2a94718ee9afc7ea4ad5f0, premium89.web-hosting.com
 agenttesla, b44bca9b588cf27840935c35b0154ac96aa6276a2c155447e963209175b03c54, mymobileorder.com
 agenttesla, b5592e770b7d303941e3eeefcd68cc0f3abd1f67423c073dff03f4f954a9dbde, mail.fardarlogistics.com
 agenttesla, b572882a705fb5963ab6184c49367cf73f720092d72f99cad222a26bf0318918, mail.amtechcards.com
 agenttesla, b62200d6871b5f2343d407fa822c9fea82b9c28d7414b088e1a56160bf3706b7, us2.smtp.mailhostbox.com
 agenttesla, b630b78934a6734c47a985812709276c146be604d285251b428130232484a890, us2.smtp.mailhostbox.com
 agenttesla, b73234fec5a6cbf5e739a75ce9aa9674f11dd409a81c740f009e1bf18c767c94, mail.elec-qatar.com
 agenttesla, b868d7a2a78e9436fc3675c1ddbcfa1eda4d73926a856acd36e54f9e5b09fba5, mymobileorder.com
 agenttesla, b8cc87b3e18517799b9d256edc93224ff87b14756d37b8c6c2d9a89eb3f9b533, premium184.web-hosting.com
 agenttesla, b9acce3baff6363cf5ccfa55dbad67650905b856985de50829e65fa8a4be3d9c, mail.dynamicconsultinglogistics.ma
 agenttesla, bb9892ff838c2e6a7a2740122a6518b9d60da413638e7e102fa9729d1d9df7cb, cp5ua.hyperhost.ua
 agenttesla, bc328d4e72858cdc4851142d1b6e50919f6f1ea59b92f9ce0ea8e55fb2378dec, mail.taeyangmetal.in
 agenttesla, bd728300ab85708c5027ba39c24c74affb4ffe160fb275e2cc1dc35c14c6e2da, premium89.web-hosting.com
 agenttesla, c1d57ced264a612aa7069940bd8bc2ad9b1b5d66cf8258ed58027b6101d60e28, mail.unitechautomations.com
 agenttesla, c22334a30489c310ccebd2eb69b289bf3f01461a72a4da146a59cdaa06283e04, mail.unitechautomations.com
 agenttesla, c961a1c23fe7e6704d8c4b718815dd0d1f93804de28756fb44ab0d6aa70776a1, premium89.web-hosting.com
 agenttesla, cd71376c12e5a0c3fdd2ea32556623ef987eaa4330d88547996bb29c444cafa6, host2069.hostmonster.com
 agenttesla, cef638c80808c085c6ad3382a2c0d1f664a0cba324a178fa2acdd572a193eac5, bengalleather.com
 agenttesla, d0a1a4d065d7614fac58c3e4ed5f52e8889372a2d6c3d5bfa5c291cc1f990100, http://www.bishaldatta.info/ab05/
 agenttesla, d228edad00c7342f36732017beec3c7ea9057b6ff8c527198ab29d9eefcee645, mail.unitechautomations.com
 agenttesla, d35dce5a33e43611c39ea134ece8746a4192f1bfd8c1577d7ebd77c0ebd66120, mail.cbinet.net
 agenttesla, d48e736e767f7a8d05a2f0ccca56960fa41fce3da38caa84f701822a9507be2a, mail.atasoygumrukleme.com
 agenttesla, d5252b71a90d3ef290ff4a760b8cd4ec847feac8d5737eed43728bca34b2068b, premium89.web-hosting.com
 agenttesla, d58f020149bf471223bd3df04f402e3d3e5710bc788646df28d61791dcdda2aa, mail.bengalshoe.com
 agenttesla, d683eb7b2ffb8b8e7131a4e135273eca2c8c8fe04a20eb76ec079a6266c7b690, cp5ua.hyperhost.ua
 agenttesla, d9c4218b65cfc6623714bfb0c253dbc00b5fbd539ef8c23d9619b9513933e83c, mail.cagdasmobilya.com.tr
 agenttesla, de8e6844d70025d74f5d6fa8102f1bef0558cb4c27933e89b33c9bc73b6f11d9, 20231002_082018_8PWH-7aUzB0Ec-6fgECdf_XYiq0rhLWh.eml
 agenttesla, de907b39552d170628b0e8f7abfaf1ec26aef2432debccd1bbb4b933628f139e, host2069.hostmonster.com
 agenttesla, e238d1780170905e6de0bac176d0b507e3fd36c806079db21229279ffd1b731a, premium184.web-hosting.com
 agenttesla, e27e63e6096a727c94170fc3459661fe3fda9d396d5451ae253015880b37c9d0, bengalleather.com
 agenttesla, e2f7fb5aad34116772b8667f4b40002ad59a5f81516b66c1ce9c5874f089ce6d, host2069.hostmonster.com
 agenttesla, e6b297fc5effcaa65ed935f78e8b663257f447a9f569c4da0411854fe28a75e7, mail.unitechautomations.com
 agenttesla, e6d6dc7bbb506e894bb0742b96b51302961084748ad7d255e845f5998c3b8483, mail.hhipune.com
 agenttesla, e950e2181e30210f31caa1baa83f3f7cbb6d1a42abd54be150e1fe9a008b18df, host2069.hostmonster.com
 agenttesla, ea94dbd02c762a2ad10e292b346aab4ef7607e9acdd8dabf99cfd39af6b2354d, host2069.hostmonster.com
 agenttesla, eae8ee79f837443d3f1ca4a05375b801e6f12b5cc9b826312a59efbff650cbdb, mail.sofahaus.eu
 agenttesla, ec782c6c9788c784234f2bf815b0a2774d55e5a08d42aac4ddc79f8710b4d469, mail.unitechautomations.com
 agenttesla, ee39d49c013a847632ab6390a6ef70d33699f5b8865a769f8a74a1a7f0af2a75, premium89.web-hosting.com
 agenttesla, efe9c282205fc247d754935826249872af347953bef578f6a980d7f9f1b9d55f, https://api.telegram.org/bot6566142526
 agenttesla, f40e1c8b377326be3e33ef49ddfb71fabf7af2f9a337a3c74784fc7f0356edcc, mail.fardarlogistics.com
 agenttesla, f7a062cbdd22f2bd346f704ba3d4e1ca864ec525a4fa96ac2be1991faeeb5690, mail.cbinet.net
 agenttesla, f9196d65240be6e9b12a5064b3f5e12db86cba1852770b6dc6ae852d25a352e0, mail.amtechcards.com
 agenttesla, fe6b8e0d183bf1cf3105a86efd5d70110afd4a05ddcfc7555bb2053f08812fa4, mail.telefoonreparatiebovenkarspel.nl
 agenttesla, ffe2f8fec7f9ba8ff7877c6913820df6048f6d3df97dedf8d81efc3a51baba87, mail.sterlingcraft.co.ke
 darkcloud, 52bf42d91cce8764858e3d324a1f85d198722c43f6ae2a3d51e4dc93132bfa50, [email protected]
 darkcloud, 90d58c6089fab3af52343960c33110e0b812b9199e31f260fb769e2c2d5d2769, [email protected]
 darkcloud, dd7eadb2f710251b89b863fcf1c39f6cfd83e080105123197ad05999a39d75cc, [email protected]
 formbook, 22da6798edf7ecbc018e132ff61dff54b38704226c0f4693e8981b112e69eafc, www.miraculousstore.com/g5dm
 formbook, 28f46d936dbf0c6a27993a483c00b6dbbe8a17f9751be9b0efb657d95b4d9400, http://www.felizdiadamulher.com/8hbu/
 formbook, 2eadbbb63c8c36c588958484ad8d5a044a689f72ea3cc81a9dcf4b1a829ff7e9, rfc234.top/oy30
 formbook, 3ea69a1a0c5cc196a71ab1d7754abe0683813ff321d59d731bb72d2d3d076f3f, www.thesimplifiedagency.com/g5dm
 formbook, 7d1d279985060889c0213cae4ae9b4e8fecabc7c021b076d6034fdaaa1d903ae, www.4juris.xyz/t2tc
 formbook, 87cdb1c28e0d076b58e2ff53ad115210882b38fb4b3d2494c70884bc6501f6cc, http://www.liferemedies.net/fict/
 formbook, 93bc82b99ec0339576f7f93e026ee2dc33b8bdddd99b2addca44e5cbde6b59f8, sell-home-fast-for-cash.xyz/cc73
 formbook, a3e03018e2dba7a61cd424c3b09864decf28815e7a3d84187f68ebaa395de908, www.tecverse.xyz/ab05
 guloader, db5e71460a2362ee3aac177133b2d39df51b184f45dbc75568ae696a2a27b4f5, mail.anba.org.ar
 guloader-remcos, e31d3bdb9083d799b697ccefbd7b27be023963bd9497a2839d43e258a7cd8f06, sheddy1122.ddns.net:6524
 ifsb, 9d80eb4be1e9139a03a6aa3f053fec14ed1880251b1f13d85d84d7d64dddd581, https://erbilmail.com/ind9010j29d0j2.php?id=1
 ifsb, aa9d36671a0f9e69bc379db60156df7ffa15446781e25a3495a85f3ede9fb823, https://stills.sale/wp-admin/css/diu1bh2uidn1ss.php?id=1
 ifsb, b3a2a819e27b004310e65c2b6b000cb8444b3233271a5064e5314d9580d128d3, http://185.247.184.139/jerry/
 ifsb, d0f5b9d6db0482d92ec833a86453691ac61301dd66e03d3bcf304c72e4d9bb9e, https://stills.sale/wp-admin/css/iudvg12hd21i89.php?id=1
 lokibot, 17784804b42643f70dcf9332eee35837b1b4b91452a9c25e27bb409e957e12d2, http://kelly.spencerstuartllc.top/_errorpages/kelly/five/fre.php
 lokibot, 8e7100c354e0a53a58de3c7e3646997ebf0adaa17f39c4dd92139ebd06db4db8, http://kelly.spencerstuartllc.top/_errorpages/kelly/five/fre.php
 origin, 4114485fdfbe256596299210254db82ebe399c7bcee81127b6e5a9b098f2f5d8, https://discord.com/api/webhooks/1164504301004136538
 origin, a1c70ed91881778f7e0fc6ad5275848145424d452e1053a5a4c5c7ca58fc61fc, https://discordapp.com/api/webhooks/1163581272044601434
 origin, e6b6f23895185671a91e377fb4a48b3cd934092daf0409559e0f5c7f22949c5f, https://discordapp.com/api/webhooks/1163583965509197905/
 pikabot, 80ca22e1fcb06427b297b71792be0683c3bb4ca66850291b38b513b4a6eee73b, 202.182.121.203
 purelogs, c2c3665fcc34cfb52d73b9b5c28f04b3ce1c0d585dceb614d3759626d1326631, 89.37.99.49
 quaxloader, 06578cd5ced41347d5629f398a9806ac509eb7a799e020994d349effd5a9194c, https://qu.ax/oEjn.mp3
 quaxloader, 40c2c1cf61b7715fbe781c831fafadca72382dec967320a3b866c3415ace320d, https://qu.ax/mdHk.mp4
 quaxloader-agenttesla, 0ab15060cfbbe797a8cacf4fd27d2f95b2590d7bb459a4feab1a1608c61df454, https://api.telegram.org/bot6548646803
 quaxloader-agenttesla, 65c4d932a71d1f36d1c57b7ed319c20446d3c935b60f8f1262bc047e1c6556ff, smtp.zoho.com
 quaxloader-agenttesla, 7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243, mail.fardarlogistics.com
 remcos, 2e2abfd4db12a9c2377450a9ac0fd7bc4657b235f605d1a14de3e6b5c4b65744, sheddy1122.ddns.net:6524
 remcos, 3cb93d166196c1400e069fd437153d956df26d587c969c2c1a525874633a1e99, premium184.web-hosting.com
 remcos, b33f1430088ad3c77a02a36d407b8928b2dfe9ffb03a6c62e43845e086926eb9, 45.95.169.140:2404
 remcos, e479c0b49b6fe13242fc767e1db58067b61e4c16ff7068d3b39c4d8c2836428f, sheddy1122.ddns.net
 snake, 1700e539cd41c00e4b3b8b4405ee0bf338192f0b24836939e14f8b9d2c6bd9f4, mail.hahcd.com
 snake, 84dd2a034d3c9d53d216198cb05f2d5fc65ad7dac487915196eda622a997bb05, 89.37.99.49
 snake, b3c45a636fbb907b7a96dc9bb2986f698ca375524c61507a5fe414a940f72b16, mail.comxdesign.com
 xloader, a5bea05a2f6c78eef246760dc715dd3fe10b0615ac161efbeb8a2cf6c9836499, http://www.credseg.com/ch4g/

 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
 [email protected]
	Date,Details,Email Payload Type,Users Targeted
	10/1/2023,FW: damaged Goods; xlam -> agenttesla continued to 10/9,Attachment,
	10/2/2023,RE: SHIPPING DOCUMENT & PACKING LIST; r15 -> agenttesla,Attachment,2
	10/2/2023,RE: CONFIRM REVISED PIURCHASE ORDER; zip -> formbook,Attachment,2
	10/2/2023,Signed Purchase Order: PO/US/4509622207; zip -> formbook,Attachment,2
	10/2/2023,Attachment name is Document.zip; zip -> agenttesla,Attachment,2
	10/3/2023,RE: New Order; r15 -> agenttesla,Attachment,2
	10/3/2023,Wrong Payment Information; zip -> agenttesla,Attachment,2
	10/4/2023,RE: Status For September SOA; xls -> agenttesla continued to 10/5,Attachment,4
	10/5/2023,Purchase Order - HOM-OS-20-23-813; r15 -> agenttesla,Attachment,2
	10/5/2023,Advance Payment for our order no. 28302-TF-03; tar -> agenttesla,Attachment,2
	10/8/2023,New PO NL/DB-078; rar -> bat -> agenttesla continued to 10/10,Attachment,3
	10/8/2023,RE: Purchase Order - 8730937.; r15 -> quaxloader,Attachment,2
	10/8/2023,Payment Advice; rar -> bat -> agenttesla,Attachment,2
	10/9/2023,RE: OS_PO#3210046374_SALE ORDER_INQUIRY_31032021; rar -> agenttesla,Attachment,2
	10/9/2023,"FW: REVISED RE: New shipment delivery product, ETD 09/10/23; r15 -> agenttesla",Attachment,2
	10/9/2023,Attachment names contain inv_; pdf -> js -> zip -> wikiloader -> ifsb,Attachment,246
	10/9/2023,DHL AWB#Tracking39098373; xz -> agenttesla,Attachment,2
	10/11/2023,PAYMENT/REMITTANCE COPY; zip -> agenttesla,Attachment,4
	10/12/2023,FW: Re: Open Invoices; z -> agenttesla,Attachment,4
	10/12/2023,Attachment names contain inv_; pdf -> js -> zip -> wikiloader -> ifsb continued to 10/13,Attachment,215
	10/12/2023,??: Payment; zip -> agenttesla,Attachment,4
	10/13/2023,Technical Inquiry for Manufacturing & Supply.; z\|rar -> agenttesla continued to 10/16,Attachment,8
	10/16/2023,delivery order; rar -> agenttesla,Attachment,4
	10/17/2023,Purchase Order No : CO-04391 dated 17/Oct/2023; lzh -> agenttesla,Attachment,23
	10/17/2023,Payment Advice - Advice Ref:[A22D4YdWsbE4] / Priority payment; rar -> agenttesla,Attachment,4
	10/19/2023,Subjects start with ACH\|DHL; pdf -> link -> js -> zip -> wikiloader -> ifsb atachments changed to inv_,Attachment,209
	10/20/2023,PO LGMS (PVT) Ltd; exe -> agenttesla,Attachment,2
	10/21/2023,QUOTE--GEI REF 2177700XXXXX023; rar -> bat -> agenttesla continued until 10/24,Attachment,4
	10/23/2023,RE: REQUEST FOR QUOTATION.; doc -> formbook,Attachment,2
	10/24/2023,NEW ORDER REQUISITION-No: STH0000514-3; rar -> agenttesla,Attachment,13
	10/25/2023,Re: Request for qoute; rar -> remcos,Attachment,3
	10/25/2023,RE: 4th Quater Enquiry for New Order; doc -> agenttesla,Attachment,2
	10/26/2023,Attachment name is attachments.zip ; zip -> agenttesla,Attachment,2
	10/28/2023,REVISED DOCS REQUIRED - Dept 9.; zip -> purelogs,Attachment,13

	agenttesla, 0331ca586f68e8a853e9030635f249dba8337da5ef7c29521c373807fcce1a6f, mail.cyber.net.pk
	agenttesla, 03eb475c31001a1695cf0dd132828e8455d43becb69b0cd6b3af6f59a06649bd, bengalleather.com
	agenttesla, 091982de7843b6d35b392a9526b3abf94b6a89a0455fa3f1ff1a18ab823c307d, mail.cbinet.net
	agenttesla, 09cab28b90799facd47c9a949855955c635efef849dd8896110e8376ff7f1458, mail.gcsho.com
	agenttesla, 0c2217b0e413d9557792e23cbe849eaac0d69c34c42dad168ab31e989591c8fd, us2.smtp.mailhostbox.com
	agenttesla, 0ee09ee5a382f01dfb53c94676b9c5676b1b82be91f46b6a2ffc1996c321a994, https://api.telegram.org/bot6521365373
	agenttesla, 18d2b8838dac4579e0dad6276b13ee43f4de3e85e61e631403b6e149d03ab197, mail.bengalshoe.com
	agenttesla, 1acf701fe129149fc33c5431899d83aa64fd31ad0b241ed83ea8ab1673eff6db, mail.fardarlogistics.com
	agenttesla, 21708c6374a6eb8422c9eae984bd00a8b8f436a27ef5e1946aab706fa38f30e1, mail.amtechcards.com
	agenttesla, 236fea80d391c6d642ec10a7710c6cf220610377441fc3ee5f2c1bfff0c01ecd, https://api.telegram.org/bot6406366928
	agenttesla, 246d6ffb502aa4b83300c5bb35e008e245ad36d243a83e6bdfee04eefdaac71e, mail.sofahaus.eu
	agenttesla, 28604f556f60165325c32dfa4a99efda916026618f0d61602fdabd858608fbbd, mail.cbinet.net
	agenttesla, 2994d5d9965778bf6d739ad76f95c3a9cb13775490e19fdda9e21634cd5f538b, ftp://valvulasthermovalve.cl
	agenttesla, 2cc15ff945b1d5856248237f3dca6a0657ae8cf58e95f497eec29011e5f2b2c3, mail.dayanbiotech.ir
	agenttesla, 3668bfda289003db294d1a1cd542ae1779810daab317fbed4165c1b422f20c31, mail.scandexbd.com
	agenttesla, 3bac14e1cf7531bfb5bc8f41a553df5f23bf6accb20e55bf14b498d781d61db3, mail.commtechtrading.com
	agenttesla, 4343245f1db76214093c4adefb0b167327c7bd49fa66608eccb2c4faadc3e32d, cp5ua.hyperhost.ua
	agenttesla, 437c9a84221317873865c1a2e61fcb6011dafff7afb646c482dfefb400da0186, mail.industrialgh.com
	agenttesla, 475adab8c1638c6f1c930d1a6e9715f7728052fb76407c5393b24adc2884c3f1, bengalleather.com
	agenttesla, 4ad5d7938a8d78d2529a72df4f8928c8be69d14e7366dc3677ae509925d08646, mail.hhipune.com
	agenttesla, 4bb1702e5b8ecbc4a91dd9d1ed77ebbdf0406b6712143b3b86c906a5709a05fa, mail.royalcheckout.store
	agenttesla, 4f286970516f49d9114010e3de523bdc7f13608d5c1b0f87b1a4c9ebaa5fcb6c, https://api.telegram.org/bot6195347596
	agenttesla, 4f73fe6e6ff093327306d6dccc38844c5aee07d008de3349a61c9b96259168c7, https://api.telegram.org/bot6522171090
	agenttesla, 4fa066bf81e73be8c55139382fba7c7c33fbf12d2a28a6d8d55e09f8b430190b, premium89.web-hosting.com
	agenttesla, 514b7b027e522406396244bfcd1bf8cdd60b967fd99bc9b8bce226dc0eb6e93d, mail.iaa-airferight.com
	agenttesla, 52a3b3a8d401e4f505e3b7e336ebd30af42823a1400711c5ea8482483eccd574, mail.amtechcards.com
	agenttesla, 5b5bbec5426595d0b6691f19add610017e667d14445e6d374c9c7e51ff1826cb, us2.smtp.mailhostbox.com
	agenttesla, 5c485141f97385046d2a64a4a93c1ad50682cd97e3e5cbe1b3f6e9e0472efd56, us2.smtp.mailhostbox.com
	agenttesla, 5f282e51360d29f2c0a4b8adf49357c28b2a6413fabf5fba3ac89d8e5ebdda79, mail.amtechcards.com
	agenttesla, 5f2d8658d5995ef397df2b732213bc26b55bfb95e9d02a83a339d6590c4ef089, mail.gimpex-imerys.com
	agenttesla, 63ed0ac5ef8a514cfe2d1dbb716ab354a07b770c62826978ba2a012905bcde9d, host2069.hostmonster.com
	agenttesla, 6490e5498bf6ca3c0b3cb40d581e019e8c4135fd8bc49580c30160f6b02450c6, premium89.web-hosting.com
	agenttesla, 649cbde56fbdaf2f52343c1c584fbe1357cf4be19264d7f31a21a6c7078ecf18, premium184.web-hosting.com
	agenttesla, 65c423ef88f86b07c5429ab4ebc8c89b7d6c39a032e8b7465f7b84bac91d3da9, mail.amtechcards.com
	agenttesla, 66835cb6c3d29e2492452fd43a1e552df65ece1b59a048f21dcf0a700f769db7, https://api.telegram.org/bot6379133890
	agenttesla, 6b57819398d3a6c1180a379d2f94f68e6074ae4a2e4275dc827465f0ab84d8b4, mail.amtechcards.com
	agenttesla, 6c83949ffec3d4b7b6ca9b809640068415a8cef56ed7c81528a616da7838a762, mail.cpbgdigital.com
	agenttesla, 6cc94af7278990c89ed746ebc99759dc7d847cfcdd3cd327d15988b489e3e59d, mail.product-secured.com
	agenttesla, 7527698e11a5f07d7a6c17f471943a9473857e724d394f043677eb59bf4dbf17, mail.bengalshoe.com
	agenttesla, 7590cb175c30e90638d9d0f168add1c0cb66d769917ebc3052a9235618a5582b, mail.amtechcards.com
	agenttesla, 7988501f67d983c87769531838a8554a2fa186c3bb5ea76b9b697491c81ed7a0, https://api.telegram.org/bot6362373796
	agenttesla, 7ce1ec80a206073fad757e02c83fed1341ca7df103082c3338bff11232f7b5a6, bengalleather.com
	agenttesla, 7faf63f792b8578c37597877a182f75415cb7f4995319007db641af4e7264f98, smtp.yandex.com
	agenttesla, 801001af8a75fe6ef6d54185561138dbb46588fa64cafec2564009e1b124b7f7, mail.asiaparadisehotel.com
	agenttesla, 801352e073b5e718021995a07e3506fd05b12ee410b69f242c1b9dd2917c30ac, mail.dayanbiotech.ir
	agenttesla, 820e1b2bff7decc1832bc8804a8329eb79278bcffce98a525fd12de46f89fffb, premium89.web-hosting.com
	agenttesla, 824068050121b62272bafa20abe9d10fbadadafc97a529754ec73d884eca5527, bengalleather.com
	agenttesla, 83b11e62d88278fd953ef2496d6e6217d314defc55f7ba1fbb4d0a00ec6651b2, us2.smtp.mailhostbox.com
	agenttesla, 8570c011be165d6c092c41db1f85d4c52fdca1812b7c9ee87420702c2776005a, mail.dynamicconsultinglogistics.ma
	agenttesla, 85d0e15fe8e747d9e299c7a0ffa20c51f563a9c74561d9198c8293f0a6497841, mail.gimpex-imerys.com
	agenttesla, 91ad210dae91d724c701330e1ce8fd5047b8ee7a475d1dcc1474a812cab351ca, premium89.web-hosting.com
	agenttesla, 937dab028a6d88b7b985465c62eb1257878a42b865b73cb745c5593d0b70b586, mail.hhipune.com
	agenttesla, 95146fd91e53797e70aa24b0a662c345ea9c0ed0500e9a996506d3c79433304c, premium89.web-hosting.com
	agenttesla, 95c4b47fa9c4b6ddbd71d3f7c46e3610a46a37c44b18782d8b1e104946f806de, quimicaobal.com
	agenttesla, 9886fa5dd072d4bb23ea5353ac0014d36b5425f49fdb0b315a2ed54cc5fcc33d, fast.nsjet.com
	agenttesla, 9acb3802e7f15ac9c240749ff8c3ebe7a7cd660bedf4b6a6a1edef4de714aa43, mail.commtechtrading.com
	agenttesla, 9b15faed8bf8fc81cdc6831e7e0c89a27419fae8940e1fec61471f93d18b225e, bengalleather.com
	agenttesla, 9bc899defa6d47d99cefedf9b92f85b819c1ef087e1c851e767da436cc402f23, us2.smtp.mailhostbox.com
	agenttesla, 9d0030c2c7fa31d81278dfb94e88e98dc04268cf6a3df23d98aaae875e40cb82, premium184.web-hosting.com
	agenttesla, 9d4040bf5689a6d0022bcd062cfd40c3d17601e4713cf424876a2b65680dcdbe, mail.amtechcards.com
	agenttesla, 9e2dee66caf6e9d222eb16b6e88b8d323b0513f95b85f3761553f286b596c944, mail.fardarlogistics.com
	agenttesla, 9e2f5bad6acb0454f71026526cb9d5d78985ef6e566b433b04ba7aba5b277ddb, us2.smtp.mailhostbox.com
	agenttesla, a0a83c6bc77fa73e06bc77a6bdd2e7d3b84319cff7f009d7f6ccc7fca5c48820, host2069.hostmonster.com
	agenttesla, a0fb662473509e8c430d1dde009a85acc2c0d57ccaba3b290380d1f3d4ab9457, host2069.hostmonster.com
	agenttesla, a1018f6e1828a26fe95f6a0c4ef3b1b55b13966fbfd11fecc41a1b295457253c, smtp.zoho.com
	agenttesla, a6608ce0f39cb1ee560bfdf8d7e421b093169b36c5db03b1a77be8296a6736ee, mail.cbinet.net
	agenttesla, a6ff3a070e5e8fcbf4d1da9ee062b9fd91e1773e17f27c86310b13747739fb2d, mail.elec-qatar.com
	agenttesla, a830eaba9888a6fa0a3cbf85da3636f1c41ae7a0372cbc5cfab0efd197894fc9, https://api.telegram.org/bot6311067514
	agenttesla, ae1a9131c9f7d3b5f261c4f95dc348076c1c0be47fcc1914a428e47576fb0b9e, mail.amtechcards.com
	agenttesla, af9373c37ef6f7cee66f69230dd4bf6f7773153af373f3485a387c0856ef5dbc, mail.cbinet.net
	agenttesla, b02b2ce7e00fcf9e36c4469bd68e3cd6812ccb39fd24a7beec8aec0f7b9e3287, mail.awelleh3.top
	agenttesla, b0dae00efdb8e3e23450b7c29f558a85a82f5a95fa2a94718ee9afc7ea4ad5f0, premium89.web-hosting.com
	agenttesla, b44bca9b588cf27840935c35b0154ac96aa6276a2c155447e963209175b03c54, mymobileorder.com
	agenttesla, b5592e770b7d303941e3eeefcd68cc0f3abd1f67423c073dff03f4f954a9dbde, mail.fardarlogistics.com
	agenttesla, b572882a705fb5963ab6184c49367cf73f720092d72f99cad222a26bf0318918, mail.amtechcards.com
	agenttesla, b62200d6871b5f2343d407fa822c9fea82b9c28d7414b088e1a56160bf3706b7, us2.smtp.mailhostbox.com
	agenttesla, b630b78934a6734c47a985812709276c146be604d285251b428130232484a890, us2.smtp.mailhostbox.com
	agenttesla, b73234fec5a6cbf5e739a75ce9aa9674f11dd409a81c740f009e1bf18c767c94, mail.elec-qatar.com
	agenttesla, b868d7a2a78e9436fc3675c1ddbcfa1eda4d73926a856acd36e54f9e5b09fba5, mymobileorder.com
	agenttesla, b8cc87b3e18517799b9d256edc93224ff87b14756d37b8c6c2d9a89eb3f9b533, premium184.web-hosting.com
	agenttesla, b9acce3baff6363cf5ccfa55dbad67650905b856985de50829e65fa8a4be3d9c, mail.dynamicconsultinglogistics.ma
	agenttesla, bb9892ff838c2e6a7a2740122a6518b9d60da413638e7e102fa9729d1d9df7cb, cp5ua.hyperhost.ua
	agenttesla, bc328d4e72858cdc4851142d1b6e50919f6f1ea59b92f9ce0ea8e55fb2378dec, mail.taeyangmetal.in
	agenttesla, bd728300ab85708c5027ba39c24c74affb4ffe160fb275e2cc1dc35c14c6e2da, premium89.web-hosting.com
	agenttesla, c1d57ced264a612aa7069940bd8bc2ad9b1b5d66cf8258ed58027b6101d60e28, mail.unitechautomations.com
	agenttesla, c22334a30489c310ccebd2eb69b289bf3f01461a72a4da146a59cdaa06283e04, mail.unitechautomations.com
	agenttesla, c961a1c23fe7e6704d8c4b718815dd0d1f93804de28756fb44ab0d6aa70776a1, premium89.web-hosting.com
	agenttesla, cd71376c12e5a0c3fdd2ea32556623ef987eaa4330d88547996bb29c444cafa6, host2069.hostmonster.com
	agenttesla, cef638c80808c085c6ad3382a2c0d1f664a0cba324a178fa2acdd572a193eac5, bengalleather.com
	agenttesla, d0a1a4d065d7614fac58c3e4ed5f52e8889372a2d6c3d5bfa5c291cc1f990100, http://www.bishaldatta.info/ab05/
	agenttesla, d228edad00c7342f36732017beec3c7ea9057b6ff8c527198ab29d9eefcee645, mail.unitechautomations.com
	agenttesla, d35dce5a33e43611c39ea134ece8746a4192f1bfd8c1577d7ebd77c0ebd66120, mail.cbinet.net
	agenttesla, d48e736e767f7a8d05a2f0ccca56960fa41fce3da38caa84f701822a9507be2a, mail.atasoygumrukleme.com
	agenttesla, d5252b71a90d3ef290ff4a760b8cd4ec847feac8d5737eed43728bca34b2068b, premium89.web-hosting.com
	agenttesla, d58f020149bf471223bd3df04f402e3d3e5710bc788646df28d61791dcdda2aa, mail.bengalshoe.com
	agenttesla, d683eb7b2ffb8b8e7131a4e135273eca2c8c8fe04a20eb76ec079a6266c7b690, cp5ua.hyperhost.ua
	agenttesla, d9c4218b65cfc6623714bfb0c253dbc00b5fbd539ef8c23d9619b9513933e83c, mail.cagdasmobilya.com.tr
	agenttesla, de8e6844d70025d74f5d6fa8102f1bef0558cb4c27933e89b33c9bc73b6f11d9, 20231002_082018_8PWH-7aUzB0Ec-6fgECdf_XYiq0rhLWh.eml
	agenttesla, de907b39552d170628b0e8f7abfaf1ec26aef2432debccd1bbb4b933628f139e, host2069.hostmonster.com
	agenttesla, e238d1780170905e6de0bac176d0b507e3fd36c806079db21229279ffd1b731a, premium184.web-hosting.com
	agenttesla, e27e63e6096a727c94170fc3459661fe3fda9d396d5451ae253015880b37c9d0, bengalleather.com
	agenttesla, e2f7fb5aad34116772b8667f4b40002ad59a5f81516b66c1ce9c5874f089ce6d, host2069.hostmonster.com
	agenttesla, e6b297fc5effcaa65ed935f78e8b663257f447a9f569c4da0411854fe28a75e7, mail.unitechautomations.com
	agenttesla, e6d6dc7bbb506e894bb0742b96b51302961084748ad7d255e845f5998c3b8483, mail.hhipune.com
	agenttesla, e950e2181e30210f31caa1baa83f3f7cbb6d1a42abd54be150e1fe9a008b18df, host2069.hostmonster.com
	agenttesla, ea94dbd02c762a2ad10e292b346aab4ef7607e9acdd8dabf99cfd39af6b2354d, host2069.hostmonster.com
	agenttesla, eae8ee79f837443d3f1ca4a05375b801e6f12b5cc9b826312a59efbff650cbdb, mail.sofahaus.eu
	agenttesla, ec782c6c9788c784234f2bf815b0a2774d55e5a08d42aac4ddc79f8710b4d469, mail.unitechautomations.com
	agenttesla, ee39d49c013a847632ab6390a6ef70d33699f5b8865a769f8a74a1a7f0af2a75, premium89.web-hosting.com
	agenttesla, efe9c282205fc247d754935826249872af347953bef578f6a980d7f9f1b9d55f, https://api.telegram.org/bot6566142526
	agenttesla, f40e1c8b377326be3e33ef49ddfb71fabf7af2f9a337a3c74784fc7f0356edcc, mail.fardarlogistics.com
	agenttesla, f7a062cbdd22f2bd346f704ba3d4e1ca864ec525a4fa96ac2be1991faeeb5690, mail.cbinet.net
	agenttesla, f9196d65240be6e9b12a5064b3f5e12db86cba1852770b6dc6ae852d25a352e0, mail.amtechcards.com
	agenttesla, fe6b8e0d183bf1cf3105a86efd5d70110afd4a05ddcfc7555bb2053f08812fa4, mail.telefoonreparatiebovenkarspel.nl
	agenttesla, ffe2f8fec7f9ba8ff7877c6913820df6048f6d3df97dedf8d81efc3a51baba87, mail.sterlingcraft.co.ke
	darkcloud, 52bf42d91cce8764858e3d324a1f85d198722c43f6ae2a3d51e4dc93132bfa50, [email protected]
	darkcloud, 90d58c6089fab3af52343960c33110e0b812b9199e31f260fb769e2c2d5d2769, [email protected]
	darkcloud, dd7eadb2f710251b89b863fcf1c39f6cfd83e080105123197ad05999a39d75cc, [email protected]
	formbook, 22da6798edf7ecbc018e132ff61dff54b38704226c0f4693e8981b112e69eafc, www.miraculousstore.com/g5dm
	formbook, 28f46d936dbf0c6a27993a483c00b6dbbe8a17f9751be9b0efb657d95b4d9400, http://www.felizdiadamulher.com/8hbu/
	formbook, 2eadbbb63c8c36c588958484ad8d5a044a689f72ea3cc81a9dcf4b1a829ff7e9, rfc234.top/oy30
	formbook, 3ea69a1a0c5cc196a71ab1d7754abe0683813ff321d59d731bb72d2d3d076f3f, www.thesimplifiedagency.com/g5dm
	formbook, 7d1d279985060889c0213cae4ae9b4e8fecabc7c021b076d6034fdaaa1d903ae, www.4juris.xyz/t2tc
	formbook, 87cdb1c28e0d076b58e2ff53ad115210882b38fb4b3d2494c70884bc6501f6cc, http://www.liferemedies.net/fict/
	formbook, 93bc82b99ec0339576f7f93e026ee2dc33b8bdddd99b2addca44e5cbde6b59f8, sell-home-fast-for-cash.xyz/cc73
	formbook, a3e03018e2dba7a61cd424c3b09864decf28815e7a3d84187f68ebaa395de908, www.tecverse.xyz/ab05
	guloader, db5e71460a2362ee3aac177133b2d39df51b184f45dbc75568ae696a2a27b4f5, mail.anba.org.ar
	guloader-remcos, e31d3bdb9083d799b697ccefbd7b27be023963bd9497a2839d43e258a7cd8f06, sheddy1122.ddns.net:6524
	ifsb, 9d80eb4be1e9139a03a6aa3f053fec14ed1880251b1f13d85d84d7d64dddd581, https://erbilmail.com/ind9010j29d0j2.php?id=1
	ifsb, aa9d36671a0f9e69bc379db60156df7ffa15446781e25a3495a85f3ede9fb823, https://stills.sale/wp-admin/css/diu1bh2uidn1ss.php?id=1
	ifsb, b3a2a819e27b004310e65c2b6b000cb8444b3233271a5064e5314d9580d128d3, http://185.247.184.139/jerry/
	ifsb, d0f5b9d6db0482d92ec833a86453691ac61301dd66e03d3bcf304c72e4d9bb9e, https://stills.sale/wp-admin/css/iudvg12hd21i89.php?id=1
	lokibot, 17784804b42643f70dcf9332eee35837b1b4b91452a9c25e27bb409e957e12d2, http://kelly.spencerstuartllc.top/_errorpages/kelly/five/fre.php
	lokibot, 8e7100c354e0a53a58de3c7e3646997ebf0adaa17f39c4dd92139ebd06db4db8, http://kelly.spencerstuartllc.top/_errorpages/kelly/five/fre.php
	origin, 4114485fdfbe256596299210254db82ebe399c7bcee81127b6e5a9b098f2f5d8, https://discord.com/api/webhooks/1164504301004136538
	origin, a1c70ed91881778f7e0fc6ad5275848145424d452e1053a5a4c5c7ca58fc61fc, https://discordapp.com/api/webhooks/1163581272044601434
	origin, e6b6f23895185671a91e377fb4a48b3cd934092daf0409559e0f5c7f22949c5f, https://discordapp.com/api/webhooks/1163583965509197905/
	pikabot, 80ca22e1fcb06427b297b71792be0683c3bb4ca66850291b38b513b4a6eee73b, 202.182.121.203
	purelogs, c2c3665fcc34cfb52d73b9b5c28f04b3ce1c0d585dceb614d3759626d1326631, 89.37.99.49
	quaxloader, 06578cd5ced41347d5629f398a9806ac509eb7a799e020994d349effd5a9194c, https://qu.ax/oEjn.mp3
	quaxloader, 40c2c1cf61b7715fbe781c831fafadca72382dec967320a3b866c3415ace320d, https://qu.ax/mdHk.mp4
	quaxloader-agenttesla, 0ab15060cfbbe797a8cacf4fd27d2f95b2590d7bb459a4feab1a1608c61df454, https://api.telegram.org/bot6548646803
	quaxloader-agenttesla, 65c4d932a71d1f36d1c57b7ed319c20446d3c935b60f8f1262bc047e1c6556ff, smtp.zoho.com
	quaxloader-agenttesla, 7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243, mail.fardarlogistics.com
	remcos, 2e2abfd4db12a9c2377450a9ac0fd7bc4657b235f605d1a14de3e6b5c4b65744, sheddy1122.ddns.net:6524
	remcos, 3cb93d166196c1400e069fd437153d956df26d587c969c2c1a525874633a1e99, premium184.web-hosting.com
	remcos, b33f1430088ad3c77a02a36d407b8928b2dfe9ffb03a6c62e43845e086926eb9, 45.95.169.140:2404
	remcos, e479c0b49b6fe13242fc767e1db58067b61e4c16ff7068d3b39c4d8c2836428f, sheddy1122.ddns.net
	snake, 1700e539cd41c00e4b3b8b4405ee0bf338192f0b24836939e14f8b9d2c6bd9f4, mail.hahcd.com
	snake, 84dd2a034d3c9d53d216198cb05f2d5fc65ad7dac487915196eda622a997bb05, 89.37.99.49
	snake, b3c45a636fbb907b7a96dc9bb2986f698ca375524c61507a5fe414a940f72b16, mail.comxdesign.com
	xloader, a5bea05a2f6c78eef246760dc715dd3fe10b0615ac161efbeb8a2cf6c9836499, http://www.credseg.com/ch4g/

	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]
	[email protected]