April 2022 Malspam Campaigns

gistfile1.txt

Date,Details,Email Payload Type,Users Targeted
4/3/2022,Payment Advice - Advice Ref:[GLV124182676] / ACH credits / Customer Ref:; gz -> xloader,Attachment,2
4/4/2022,Payment Regarding Shipment; zip -> agenttesla,Attachment,4
4/4/2022,Re: NEW QUOTATION REQUEST; rar -> agenttesla,Attachment,4
4/4/2022,Request For Quotation|RE: Invoice and Packing List; z -> agenttesla,Attachment,4
4/5/2022,Payment Reciept; zip -> agenttesla,Attachment,4
4/5/2022,BALANCE PAYMENT SWIFT /REF GO 2022/04; zip -> formbook,Attachment,2
4/5/2022,Quotation Request - PT. Meidoh|Jacques B. Pierre | Product Enquiry#00183773386001; cab -> agenttesla,Attachment,4
4/5/2022,Re: Re: Revised PI; xlsx -> formbook,Attachment,2
4/6/2022,RE: Check Copy ID#711539; zip -> bitrat,Attachment,15
4/7/2022,Re: VERY URGENT Re: PI#2320; r00 -> formbook,Attachment,3
4/7/2022,RV: Re: 16L SNAP WHITE; r01 -> formbook,Attachment,3
4/7/2022,Pending Shipping Bills; z -> agenttesla,Attachment,4
4/7/2022,RE: Signed Charter Agreement // April 8th, 2022; vbs -> asyncrat,Link,2
4/7/2022,Re: Payroll; xlsx -> asyncrat,Attachment,2
4/11/2022,Payment Information & Shipment Schedule information required; doc -> lokibot,Attachment,4
4/11/2022,REQUEST QUOTATION - Month of march 2022; ace -> lokibot,Attachment,2
4/11/2022,RE: Flight Confirmation; link -> vbs -> asyncrat,Link,5
4/11/2022,Issue invoice List of items|List of new product items; z -> nanocore,Attachment,4
4/11/2022,PURCHASE INQUIRY; iso -> nanocore,Attachment,2
4/12/2022,RE: PRE-ARLERT FOR : NANSHA--CHICAGO :GGZ1660250 (CMDUGGZ1660250); zip -> agenttesla,Attachment,7
4/13/2022,Re: Re: Due invoice; z -> formbook,Attachment,2
4/14/2022,Jemputan Menyertai Sebutharga / Invitation to Bid Quotation - University of Malaya; rar -> guloader-lokibot,Attachment,4
4/14/2022,TT COPY; z|zip -> agenttesla continued to 4/17,Attachment,12
4/14/2022,RE: DHT PEONY - DPEO220021 - COPT MAIN STEAM VALVE SPARES|RE: Purchase Order; zip -> agenttesla,Attachment,3
4/19/2022,Shipment Document; z -> agenttesla,Attachment,4
4/19/2022,?TR: Reminder - SOA Overdue a/c from PO 1328; lzh -> guloader -> formbook,Attachment,4
4/20/2022,CI & PL; cab -> lokibot,Attachment,2
4/20/2022,Payment Receipt; iso -> redline stealer,Attachment,2
4/20/2022,RE: Purchase Order 2022; gz -> agenttesla continued to 4/27,Attachment,3
4/20/2022,Invoice from eRev, Inc; link -> zip -> jar -> jacksbot continued to 4/27,Link,13
4/20/2022,Re: Shipping Advice - ETD 22 APR. 2022; zip -> agenttesla continued to 4/25,Attachment,5
4/21/2022,Re: PO 42122; doc -> lokibot,Attachment,5
4/22/2022,RE: BASHAN - ALBA FOOD - Contract No: 38/2020- Shipping documents; zip -> agenttesla continued to 4/25,Attachment,5
4/22/2022,Swift Email Bildirimi / 13886.37 EUR; r19 -> azorult,Attachment,2
4/22/2022,Payment-Advice - Advice Ref:[GLV304408871] / ACH credits / Customer Ref; doc -> formbook,Attachment,2
4/23/2022,RE: Requisition STR-DD225227- Electrical store and Steering gear contactor (Urgent); zip -> agenttesla,Attachment,3
4/25/2022,RFQ - From SunExpress Entry Code: LMQY-DG4P-1X4W PO: 01489239; link -> snip3 -> asyncrat continued to 4/26,Link,39
4/26/2022,RE: Our Bank Transfer; gz -> lokibot,Attachment,4
4/26/2022,R: Invoices and Credit Notes-FCLshipment_Notification_ #27_04_22; vbs -> guloader,Attachment,4
4/27/2022,Attachment name is swift code; gz -> agenttesla,Attachment,4
4/27/2022,IRS Correction letter; iso -> remcos,Attachment,6
4/27/2022,Fwd: PAYMENT; zip -> agenttesla,Attachment,2
4/27/2022,RE: REQUEST FOR QUOTATION / UK to CMB / AIR FREIGHT (CMB FREIGHT EXPRESS); zip -> snakeykeylogger,Attachment,2

agenttesla, 03890507fa2bac73bd1caf5062bf41ccd5308970b7dc622509ebd9ba47671541, mail.your-server.de
agenttesla, 052e0c7aca7de7964208266fd6fc808d0d673f03ed3e6329e92ca06ec8a92a5d, https://api.telegram.org/bot1562684159
agenttesla, 06be7d214fcc7ef98b4bf890c3488d738fc5bbc1451067678f794d61624e594e, https://api.telegram.org/bot5167639867
agenttesla, 06daebd57b281ab8f21e7bb978570475831168ef7dbd5588eec42592855cac97, https://api.telegram.org/bot5225585806
agenttesla, 06f45d0cba38245b1ad9408bc2a8671018e763e318cc4fef245c15b497881d25, mail.narbon-co.com
agenttesla, 072116372105839b9aa5e1f9314ac5228b2e4fd719f9a49db4fe457e40244482, mail.waterchem.com.tr
agenttesla, 0788739dcf491273959c1d8f34e7c694d1755425d3fbfdc19cef6405f43af72f, mail.flowersforever.ae
agenttesla, 08e524ebdc5a3091674556dc2cd43a7a8851c3520f6b429eda78da0fdb0c9621, https://api.telegram.org/bot2134979594
agenttesla, 09e805792395ef2266dd0788b73ce8c2550f71e31dec65853bcbfb6c4b1bc52a, https://api.telegram.org/bot5167639867
agenttesla, 0c5d35de5ad543c2a0e6bbb8d2ed8be89bc0b1831708587a03ebc6c39b38f860, mail.your-server.de
agenttesla, 0cb22dce83168a0875822f9e9f9ab24220ac65345a15dc45ac0fb4225b8cb26b, mail.waterchem.com.tr
agenttesla, 0dd538610bdf775fa097bf8722c58c55edac86810b314d98d152c6bce90b0b7f, mail.your-server.de
agenttesla, 0e53b22264de00b429a207ae12e8a495970011076ace05303f13043e407680d0, mail.valleycountysar.org
agenttesla, 0ecb0be2a3ab9e31de1d39c534326229a7dd270ed580dd6e30fdb01aa1004d7e, mail.framafilms.com
agenttesla, 108ffe33f9e6fa4801da72be0bd641159f2285314f8449b1a38e2520d8860f76, mail.waterchem.com.tr
agenttesla, 121e1941756f604408c620daf21e4219f50430b5bab67c857ef87b1a0dc9ff4a, https://api.telegram.org/bot1562684159
agenttesla, 17e1dd57200a93e3e0f08a413e510011b40d8cbcf29b4cb771137a59941b3a26, https://api.telegram.org/bot2134979594
agenttesla, 19c3a655a9ca74f7b3125fc2130993deac85ae95c800acba047ac0e5f4d0f377, mail.morabitur.com
agenttesla, 1b58551632192126bdf5f4c44ba51303b56c928ec38e619490dc1d34fa5d28d4, server6.magsnet.net
agenttesla, 1b77618a26c1a7c13f1ebc3096f55dc61396505f5cb7bccac929bad2d06a089d, https://api.telegram.org/bot5225585806
agenttesla, 1ddb92cc0e9a6532ea09e16faa170fc14247677b8127b46a495c28f02ed922b0, https://api.telegram.org/bot5160342877
agenttesla, 1ef8e4ca252ea20cc0cf43a1dafcf418dceb57064b2ffb46cf0ea237901fc68c, mail.your-server.de
agenttesla, 1efdeb0030a676bec91fa8bdd848ccc3a307f26f0f97d166f8b4721d34bfb586, us2.smtp.mailhostbox.com
agenttesla, 1f9f0ee5dd7d68fa9d1d0e4dc83b72d75c792fde2006625e10eb85dce68de41d, mail.flowersforever.ae
agenttesla, 2041c8077261549953367916776c31c3ca5f38a97e4f12f231d06b32c6f7fba7, https://api.telegram.org/bot5167639867
agenttesla, 223d229605824345b0a52e8cda6b4b5cec4e538b4d8c0865aa639df10e1c8a31, mail.safalaw.com.ph
agenttesla, 249e8306cc9990383459edb74ae9ecbd2abe7023a386c984d8b42adb39aa8469, https://api.telegram.org/bot1562684159
agenttesla, 252631a292af0b13820fcc2eafdd1a1cd956e3fbae77700c6bc87514a3e71c7e, mail.ecotanksystems.in
agenttesla, 2703d39a331b6507c7ffc3cfbbe42979f2036f25684f9c41f325fc57316f43b1, mail.your-server.de
agenttesla, 285647238ecf7df3582c978614ae4247cc52deb26d672bbb452e4ea1ed233990, https://api.telegram.org/bot5257540806
agenttesla, 2b073c55bb3106d12ec9644558ff1f636b749a9cb7df4d8f9ac5f3c1ef6d6757, webmail.chec.com.pk
agenttesla, 2b9eb3c2b33172461b670a2ad2113f41efb5da4a8c0648ad10cdfdb3001c89e2, ftp://ftp.valvulasthermovalve.cl/
agenttesla, 2cea276640b182e848732f06b74908344706d230b268ce1e491abfdd9decfcbe, mail.your-server.de
agenttesla, 30d2b4e8d5cc5466c71ec20c5ed5d2a201dceb9f0c909e7ac4ba8505da3fda8d, mail.keeprojects.in
agenttesla, 30e46886f36be5ea8a24f3d18c3773b5497653679c3c859130258403c2e9df82, mail.narbon-co.com
agenttesla, 32822cc86a702a43eb7d094110e7ae9f6bc502ef5b8d1d83527c36c345147cda, mail.medicare-equipment.com
agenttesla, 3396abe1bfc811d184237b9804385c945721da04e83f08054d9aeb772016df90, https://api.telegram.org/bot5167639867
agenttesla, 361613b915940a3b9f6aa8d702b16002474dad7b26df7f51f6310375c4e80326, mail.safalaw.com.ph
agenttesla, 36a3e0934992851e90dac8f85cd1ce46e3fd9042aaaa69acada91fc08c6283a8, smtp.cbsolt.net
agenttesla, 38ca85dce6d78cd31902c6f56c2a8972b0d7d7425c584c98b3210a5c75e3c84a, mail.waterchem.com.tr
agenttesla, 39c37c1f1eacc4e7d5429c3c06e297e248e0118d80d3aa69575ab60433b9a4a8, mail.contrivekota.in
agenttesla, 3b3ff2afcf8f10b9221e2bd5a293652103782881a9721eb94b321e20cada320a, mail.morabitur.com
agenttesla, 3d1384e2e34bad9fc2a6d1d18db8be4392fcec732a92be164c1f23ae18a00a21, mail.framafilms.com
agenttesla, 3d2bc3ee7cbb67af890357e0470f48a1800c9d48deb708603131afcc7943b0a1, mail.waterchem.com.tr
agenttesla, 3d6000e1e13f4b0356b65ce77274cf9931d70f2636fbc07bc3f278d7cee6ebff, mail.waterchem.com.tr
agenttesla, 3eca95821c90e43849f3d81b1662711f770920e95c804f187f5cfe06aaaf1cfe, mail.ecotanksystems.in
agenttesla, 4047e8d1009ae3c5ff33ffef6a44fd1c412d95e8efd92fda99835a2df72580a4, https://api.telegram.org/bot5160342877
agenttesla, 40d553850d7d4185d1c42fab7cbdc0e37edb40d44d8ef6e1e94afb0d7095fd32, https://api.telegram.org/bot2134979594
agenttesla, 41268cb974d5080d2c76e86f68e7f15844ae236bddf19108a01231c95986924b, us2.smtp.mailhostbox.com
agenttesla, 414831919c2cf34f9af8e1918587690b28d1fda2257047ea6a5acc9c40b0940e, mail.your-server.de
agenttesla, 419388da3891c82c7b2281f5ef2ce9ee05105a31e255c415509fca1948310571, https://api.telegram.org/bot1562684159
agenttesla, 440d68984c3eb506d64750df9332ffb6fe0b1f9737196857a5a6fbf59ae26b4c, mail.newoasisbld.com
agenttesla, 46db17660956e8685021fbc59df864dd9511cebb03727ef089cca70bbf940e49, mail.waterchem.com.tr
agenttesla, 46f3533f8236cf303215f3c0151ababd6f52449e45415605a2d46fa46d763a07, https://api.telegram.org/bot5158113933
agenttesla, 46fc1f0040a8cd9fd2eb84e2d7f4e6007566144a5a150f44a68b27690ab11fb2, mail.waterchem.com.tr
agenttesla, 47e624d45a20608d4d50c5776a458ce37f60acfc43e2b70bfaa650336ed6b649, mail.safalaw.com.ph
agenttesla, 48d56e0801d7722afeeefed6acd2495d8ee50c83360a760cf68d9fb2d6fb38b2, smtp.1and1.es
agenttesla, 48fa79f2fbe72df4ce77a24b9a34d2e70cb2c22e68362c617bf2bdd33cb41234, mail.vksinfra.com
agenttesla, 49403b1998e2ad542642d0e252afc3c43a30a1546e4f79b4c572a7068e8066be, mail.nexcourier.ae
agenttesla, 498fea1da518a60ebb021dba7ad4537c79037fead58a2e4674e5b780bdcd2c2a, mail.contrivekota.in
agenttesla, 4e16201f3f35849555f60175b75b66da961917860537248dc48e77ec42dab143, us2.smtp.mailhostbox.com
agenttesla, 501685ba771890f678604e5e0d30686ed067c34fc89c47dfdcb643e0e7a776dd, mail.framafilms.com
agenttesla, 5112bb799c1d33e20bbb31c0d4bc58a94abab6353243fb5227731edfce5399a5, mail.narbon-co.com
agenttesla, 534eaee08d7411b5a1b897abf7d4fb3ec311b442d8022a68b383d914907a984b, mail.safalaw.com.ph
agenttesla, 537ceee1192d7c3ef3f360c4e509d5d64ab3a506bab5fecf7ad5d0e8f6ff219f, mail.waterchem.com.tr
agenttesla, 578ffc73d4b37d03d32fb2d90a4aaa716f5e76699bde6dfccc1976f7ddd2153f, webmail.libertymillslimited.com
agenttesla, 58c4b64412b4dd61472d6df712f5ec38b7b2f8d88d6607b90804c4253b6400f4, https://api.telegram.org/bot1487657528
agenttesla, 58d62d6193f73000b55515ccfeae10f072ce8771ed76de1eda62ac5aa0262b4c, https://api.telegram.org/bot1562684159
agenttesla, 5e6640ff6983ee67ee8157c4eb5cc1f3ed443389976b5760370631cbd70e8593, mail.keeprojects.in
agenttesla, 5ec21a05d1d8f035071fabb5942e97cdf5756506e7342f1fe4512144ca7e17f6, mail.flowersforever.ae
agenttesla, 5edb2be0bb3a3e20f5794da3467183f9bb1475e08868b997acb20231d1ab5045, https://api.telegram.org/bot1562684159
agenttesla, 5fceca25ac7a5b86a09d73cab124272160609079a8a756a7cba2469b00707e7f, mail.waterchem.com.tr
agenttesla, 5fd8a9938d323b529296fa6e85bd9b69c0c943a5e26c8f0349a3bd88a2231f42, mail.waterchem.com.tr
agenttesla, 6327b73e43b4f2757ff896ffe24a5ea1026f45a7e69014765c56436ebb6580ef, [email protected]
agenttesla, 69326e62ce529d7c227307835533eb7cbfbee6e5e0911609d47ea9460ce943b4, mail.newoasisbld.com
agenttesla, 6aa819ddfbb79b945195bae610a50c06c15295c71feb09ac1813feca7c4e55da, mail.laxmigarments.com
agenttesla, 6ab30070b29a4095465e89dbc1a4b0788625565aa7608973b274aadd715b5db1, webmail.libertymillslimited.com
agenttesla, 6d2c47fe5541d21ee428129c9437dbb8862b57ceba5f29061c4c930c781e84ae, mail.medicare-equipment.com
agenttesla, 6fe3e4a455584fd416ce8c785e95c072e52b08b9c8749564188f784fa7ff7f10, mail.getconter.com
agenttesla, 71cef6c774b7a7cfbc7519cef16125c27f08f4ece2760f02c1baeb2ce5fd96bb, mail.atifnazar.com
agenttesla, 71e4c1a52d077ee6310974e2f20a190b261fa52e4e42742fa09a2455b6fa0df8, smtp.4plqroup.com
agenttesla, 72f31458925d45d9de0f448b159d683de009387ee36852a659a2f30d04b7216c, https://api.telegram.org/bot5159960936
agenttesla, 752982c5ebc63618db342335c8e8ad650a448879ae224dda2e298636e6d5f03d, mail.waterchem.com.tr
agenttesla, 76b0d76cc1bc5b7d38fe2b600a56357994dc1dd792d6ad5ac5c4b30c23676d12, https://api.telegram.org/bot1562684159
agenttesla, 76d9b118aa02543347017e4ce81d855c0533e27afa49d10b02b799a80b47fc79, https://api.telegram.org/bot1681657474
agenttesla, 7bb5dae542de1dc50c4548ac6dbec63bbb3826ad81184385b50f69caff869eee, https://api.telegram.org/bot5167639867
agenttesla, 7c6d1d088641bc7291bd027bc98daf4a1745759326caed316fcfd0deb57d589f, mail.safalaw.com.ph
agenttesla, 7fb6c98ca53f923a574275d1fda1b5bd4f8cf1d30b32042f5fe8bf821be9d9dc, us2.smtp.mailhostbox.com
agenttesla, 81607f328c9d5e1c34779b41092251a9c9e29aeb7e66cee54836be1b6645abdc, mail.indiacarpet.in
agenttesla, 81ab7857e23bd53d096e97be9431c6d26307c8600213fbec68f1a951b9c78b55, smtp.sbtsrne.com
agenttesla, 82bc8a32525888916bc9d63e3982f810560109df56729f43cd5e86b421a6cb7d, https://api.telegram.org/bot1562684159
agenttesla, 8575c4daa7dbe4bad80b6772ac57d4e1aad1cc5707cdefcd4cd11f4ec5a4f622, mail.waterchem.com.tr
agenttesla, 891dae2ec0ca4748d2f3daff93add1e8a88dd761e9265d8c7a40dbf5bcf5a217, https://api.telegram.org/bot2134979594
agenttesla, 89453a45f04305f1c508c6b8a5e8cdc7bbd5c1b5876993f1b173bc2ef397a8ef, mail.nhatanhco.net
agenttesla, 89b75bc8ff9c43ac3c01b3392c5004927a86ee31d4c31377123c3d213218f92d, mail.morabitur.com
agenttesla, 8a0e97fb75f51a88752136f93826968552aa617f880055f3a63b2b52965cac2c, mail.narbon-co.com
agenttesla, 8a5a279e0e26b116686b68bfb7e576daa14a7631f3b5e3dd44cecfa30190a258, https://api.telegram.org/bot5167639867
agenttesla, 8cd988ab87b2c9cde47c006d77be283d3c03a672c9535ffed03ea80f2a6a8175, https://api.telegram.org/bot5167639867
agenttesla, 8d3c571055bd3f99e0621f23b1dd5ee5c106ee21dea31c63db048ee4a01da1f3, webmail.chec.com.pk
agenttesla, 9013eeeb0e60bbbb7d07ae055fd32cf87e19fafc8d0f6fec915b516d54184dc5, mail.jkudyog.com
agenttesla, 93b394ec5cb5014041698c3554e5db8a32ad66874f457a9a3c252b97903d6599, https://api.telegram.org/bot1562684159
agenttesla, 973cdd2632a42ff8596a6c4f6c84e4fa5a8483cd7afbd55f36a529df419a3739, mail.sumait.ac.tz
agenttesla, 98e1bc829200f02d55f220d57c9e1a0d35c69ef0b5900510ed16715b3d95147d, mail.newoasisbld.com
agenttesla, 992e7391ed758f7a572e49d4e721534e43fee930ac19bdb0be59390fd84b8d40, mail.contrivekota.in
agenttesla, 9d3cfbc3f8968fdb11de7bdc672c3192de555c1a3321adce1f4359f0d9579091, https://api.telegram.org/bot1562684159
agenttesla, 9d64fd569d16bcaaa6d77f50bbb447055c968b65e20ff1cbfbc453cf8ee32b15, webmail.chec.com.pk
agenttesla, 9d9a936978b19fc81f38e6ff2105b88e5d3a0e76efe63737a053a3d7fa5b946c, https://api.telegram.org/bot5285285345
agenttesla, a0dbc3e6d5910674a142fe79033f6a0f74fc610b128dff6197eb95b05b66c27f, https://api.telegram.org/bot5225585806
agenttesla, a84e8a094917b665b10be73c4b539394b908681fcdd5716c0a981afe313a35ba, mail.contrivekota.in
agenttesla, a95b3393a84fbd7d1cd60c873828595091026ba7c55d9ed8a8f21069c4c6bb20, mail.your-server.de
agenttesla, aa61e46752573d01d1567e34051276bf1d242f575c92e74e24dbc6bd73181e92, mail.dtvcambodia.com
agenttesla, aa893f22bcedb6f0fc0dd175366774d0314801bbdb8ef965aec45469a3fb46a1, mail.waterchem.com.tr
agenttesla, af0866cd2dbbb842783718ebc52485cccb0fd1eb925bc8bcd33a7ea252deba04, mail.contrivekota.in
agenttesla, b3b034185bf1d577a9adb373eee1a06f2dff1af0e28b4828d9dd2da397fbaed0, mail.morabitur.com
agenttesla, b3cf9684180b23218229a6e1c019bc28ee22470ac2447a0acfabed5a790b2acc, us2.smtp.mailhostbox.com
agenttesla, b761751a14cb304e70b956432cefbb3ee8044fbe0c17c2a0d31a095d0d22335a, mail.morabitur.com
agenttesla, b9f40267a7ac031e528044604bdcdaf6fa9d98eb1ac4f10aef657550dd513285, https://api.telegram.org/bot1562684159
agenttesla, ba521bcbad9e99de7e8b6dbd51f6225c7008911e35fe9c03d03f70171bd93d0a, mail.your-server.de
agenttesla, bca80ec5a8f5f72b96fecabe891d7135d3a886cbf6582649d5466560b7381c47, mail.framafilms.com
agenttesla, c07556df54012dadfa764d3d83a48ae6d171de43370eeb10d2c0339756b72d02, https://api.telegram.org/bot1562684159
agenttesla, c12df0047904d1a9d897ab81bb38760f2cde3041b3660497ef82e23a53c3a3ca, mail.framafilms.com
agenttesla, c21d98b14bd6be43d4ecc4cdaed93b309043c07a9d4653e05bd952006f8b6597, https://api.telegram.org/bot1562684159
agenttesla, c2d6cb2d88af041993946fc270ad2d49bba20cd7433b32220ab0e7e2f391768c, mail.waterchem.com.tr
agenttesla, c3dced6b2bce7364a27f12cf93fe9b856a2b46f27725b163c7a3f4b1c1b1f50e, smtp.cbsolt.net
agenttesla, c61ed51ffed87c61aa8759f994b9acd0e414ca278221326a470bb134aef31a9b, https://api.telegram.org/bot1562684159
agenttesla, c68afaf02a334124389e9c37c9a9e5736273d214221ecd384d5fae394117515b, https://api.telegram.org/bot5167639867
agenttesla, c6ff749cc548d7992cc923ce9a46429e45020fcf6990896db00ed0547f30d295, https://api.telegram.org/bot1562684159
agenttesla, c965467cabc15794c9abfc65ca12367cc8d66274682a4efedd4fc657a0a3055c, mail.narbon-co.com
agenttesla, ca01c699e8fd532640ae57c43425df740d5508f20121ff853afdf849adc14d46, server6.magsnet.net
agenttesla, ca05482b1dae2db60993bcfd67d455ddf69bfadde3aed9640ede18eb2e662d17, https://api.telegram.org/bot1562684159
agenttesla, ca8e0f1b03c67459180264fb900b072ba3b20767551266875fc9e98c589bd893, mail.dtvcambodia.com
agenttesla, caf547df46387b2df2669cc740f45af18c8660a2132542bdd9769466947cc43a, 92.38.178.11
agenttesla, cb47c3ff75a2746411df8539d2279f1a15e0e74cb460d9ebd8d9e38347dab36e, us2.smtp.mailhostbox.com
agenttesla, cbaae8ee256888d7e99e7a959e8ac80520b3642fe20f6718b3e29c99bdbe55bc, mail.narbon-co.com
agenttesla, cbb9e76424890be2c54110bb6d321f4c0d4d6aa6b50fdd4a7219b3820f838b91, box5363.bluehost.com
agenttesla, cbd0f30f047505b85d120a767818e33676d1a5b4e68eb4fdeb2e010a64f20e79, mail.your-server.de
agenttesla, cd8717a51e5b9667a820f310e65669364416914b67aa9cc1fda7ac1e8deee35a, mail.waterchem.com.tr
agenttesla, cf36285793bbcf23fac97c4dd70c854ec07bb3092aaec4eda99acdb3dec1ba64, webmail.chec.com.pk
agenttesla, d2e072688c198eb2dab3b0d69510bfa4b3ef32f4691d4db8e62e6b656534c542, us2.smtp.mailhostbox.com
agenttesla, d73763f8b8d4eb91dec386eb7a2ebf9a8a9b40c6b028d57e6144ed74551d460b, mail.safalaw.com.ph
agenttesla, da42ee9200dce5b4f9a5e6d14d233fd63714fcb766b985ea2f20076d91e19c86, mail.contrivekota.in
agenttesla, da82d4c346031d651a3bf77840330cb5c44974d425a19dac16eebb260e737544, https://api.telegram.org/bot1562684159
agenttesla, daf092a0bc8dee6bf782fbdd54e1f93d652f7854e8c76d548193595743327e21, mail.flowersforever.ae
agenttesla, e01b95ec5682c6215ab8247fb0da97bcb564c3a7833553b53dcbd6434dda242c, https://api.telegram.org/bot5257540806
agenttesla, e1f452aa64e8896f296e81519469247989b9a2912807df8225d3b717504182c7, mail.atifnazar.com
agenttesla, e21dba1b0374befe73cd1b33839f36819e3bb88204bcddbf91b28c9e515aef50, https://api.telegram.org/bot5285285345
agenttesla, e6ebc944515af969222e7b787a4107643fd0ff7f25c8871e7bae50f126a08321, us2.smtp.mailhostbox.com
agenttesla, e91bfb24215e331a7fac1b10c1b68ccc4096b7324aa5f90720cd1537164c1a10, server6.magsnet.net
agenttesla, e93e184bdd79942741080f43ec59940240a63961ae3c0e4eb0c63bf2886254d8, us2.smtp.mailhostbox.com
agenttesla, e98ad37d154c76cd25eccfbd46575bb8c037ce2a89171f08550917dcf3a92500, webmail.chec.com.pk
agenttesla, ea00a47cd62c7a477eb7326fd81215a33e4436af6f0e4d6b8a959478429a2db6, mail.str1990.co.th
agenttesla, eb955440673c18e0c82ad3d485d5417013cfe0caa37d8528bfe153c80291e65b, smtp.4plqroup.com
agenttesla, ec5c817ad2b40525aa2f414a9d027eb313f2ead3b7d7bb28615a7725873d273f, mail.ccphotos.com.au
agenttesla, ef85f9069eb8f860d143a599a3fe891ddff4341b3f6da959c69e6b6b22d3f53e, https://api.telegram.org/bot5279095555
agenttesla, f56ccfa38322d1856e5191cf12bd1e3ad22cf66e58d8eda320a0d85a6bb3ab26, mail.privateemail.com
agenttesla, f6ee3f2d96721f8e580148916f60f405714e7b3e26e1c858dc31222cc53ca9ee, https://api.telegram.org/bot5167639867
agenttesla, f965c51825b3de818f81dd4c5f4b93c6e5d0a8b035e02be55a070013c1f24519, https://api.telegram.org/bot5167639867
agenttesla, f9bf4552248c86821d5770f664423098b7ffb613d34013cc03922e6f30e58303, https://api.telegram.org/bot1562684159
asyncrat, 1f21e73330205b8ebeb6b48e3836e27920800efab0c9e807ef2f16276b32a942, daveblack.publicvm.com
asyncrat, 2bb4bb6851ef659b9bb891e22718c5b76fde4a9041d6de9775c42252db5486fb, 1biggie.publicvm.com:3851
asyncrat, 2ddcc6b97e877272b6ddb96250dbd667773f7adce1a78dea3476462cf7e048a4, sky01.publicvm.com:9217
asyncrat, 332f3bbe3510cc7085d1a161cca98f6c0de9cafbd9dedf1ca7eab71cd3e4e799, rick63.publicvm.com:5900
asyncrat, 593fd9a7e2993e2576fa546b6cf4c15880929906f749442b2f248320e30377ee, 1biggie.publicvm.com:3851
asyncrat, 811076ecbf6a331ab6c52477d3d73be6a3582f3fda6d43db76d7e53b97e1d14e, rick63.publicvm.com:5900
asyncrat, 8e5f168a9e4d034defa7f204c0e4efb57d4637a7f76c7365c751549240003c33, crazydns.linkpc.net
asyncrat, cfe65a88ebc858c083c6bfd48d1caf16128a420d9352b46c3107b8b1a1614639, sky01.publicvm.com
asyncrat, ef278d92bb133cf0bae780112c068f97332690de3399092eaa3b34f203dbf78c, daveblack.publicvm.com
asyncrat, f70727686d1c3a2d0c67ef4de64837b484948a7f0c91a37996ecf4774aadc2da, mubbibun.duckdns.org
asyncrat, fcd18b069a963b01f447b35ac7f12421ac36f8c577a1f19880ea0258e0505747, crazydns.linkpc.net
avemaria, 46d24de7277e3e2bc4197da59a405ce0d223736102773145c56c39089ce40627, 103.99.0.188
avemaria, 5abdcd716331161644b54888f1cbf23a8cdb1902e5fe379077c15857268bbbc4, 84.38.129.37:5022
azorult, 5f72024cc8a15038a120024eda6225ea45982eb8d5f37ab49d0b7b0391e9b8b2, http://e4v5sa.xyz/PL341/index.php
formbook, 044dd751a59cd849c84966a8ec5a6f65435cbd39af7696029a3ef2583819d1f4, belleeffectivescore.com/o0i7
formbook, 07b410374e6c8e4bf019940912986c0fb1279241bd86d135be323d89df9298b3, beneficity.net/e0i2
formbook, 09c97ddebb98a7c934d91a63dcb5dc5ece0003111fe759d5deb24a5b8c1fd24a, fahrschulmobil.com/w83h
formbook, 0eb3aea0d96d9fb004f9c3b63ff3cd49b5f35262102104aab0f39b8f7797a5b1, guwudy.com/sy2h
formbook, 28242eb537cb3a15a1d074732d47690314011774d0079417d60c3839cdd2656c, gaykolkata.com/b62r
formbook, 2977b4a5c38b42e49e5c1e776c07bb4ca137f9ad289c95f908b2d33e0ef18144, beneficity.net/e0i2
formbook, 32fe0c94afc43b13bb24eee8bb1e28ca68c069c8868a22a2c107d86eeb746db3, gaykolkata.com/b62r
formbook, 38c909bf15fc21291bb3bda3e4c56b117bc9810a85508eb46308b5ebcccd2719, guwudy.com/sy2h
formbook, 3b09da74a064a61e7ab0c1ebda53ec9672808950178ae4691ee5ebddf8b278aa, beneficity.net/e0i2
formbook, 3e25c1a249031c7ec06d4d6ad15a9dcd9f6cf0a72053663ebdd7a31eafb59c35, unconsulted.com/k9so
formbook, 452d0b533d6269e64c54982fbe5e07ad2f20e113650d559829b27135d8adc285, beneficity.net/e0i2
formbook, 4d5d803e91d5a07b32a19a06a8f722d3d4aead462bb2cab23470f2c2ad79b71a, catchakiller.net/o27j
formbook, 4e1d9845294ff5a1e29444f88f6467db7404c814706227560f8f820c207f0e6e, gaykolkata.com/b62r
formbook, 504c2a875f8a0f0b9cf47d70aa3f32defa0e3b66f403fe6eccba4f89b7cc379f, kellieroysellsnc.com/s16r
formbook, 61adbf6dd879e1f04ae94ef4bd432b45a72be4f77e702af4014fb57f1bebd2c7, mecchashonan.com/b6nt
formbook, 650baaf8397e4aa4925a88c44c5ab63f5b61b4c03607eb511b3bd6dc6d98f652, fahrschulmobil.com/w83h
formbook, 657e0245d74e6c7b1c9df156b243b3b88cde2bda5a288f500056d77aa0b1ecf2, http://www.thedigitallaunchacademy.com/mwfc/
formbook, 76cc06bfad45121afa9c1b5ac81cfc129a3a16a388170a84e895ed099ccccecb, beneficity.net/e0i2
formbook, 7c4eb7a47ebe8538d3373cd1e4ae873bd331f91e2bf7730444754354667abbf5, gaykolkata.com/b62r
formbook, 7d5ffe72101db06ec8ef98e2a4d698cb4a7a2c430210bef73b837fe856a5cc34, raptorwin.com/sh30
formbook, 8936c1cd18e085f39f8cb1c4ebacd04573a291e555d420acfb4845320e401aae, getplanda.com/o20a
formbook, 9c0ca1e3db304f86a5e7675145babc8d1a9e918560f898d6d3ea4dc090dfe714, gaykolkata.com/b62r
formbook, a717e53e05b2ea1e84ec89dbeb3b0d371fd4bb5f2cea461f0a7c93c08364428f, momentumcs.net/bs11
formbook, ab18a3aced2b4d168b2c0ad068b052732c06be505b17050e24b9e877bdd5a9b3, zts-ic.com/gr93
formbook, af1782b2066154e64360599c0420076f9bdf9933b5eca5914466be6b74644ec0, beneficity.net/e0i2
formbook, afa78bcaf75938acfd9cad522dbe582d2997eae52d9f7d8b4acc6b66e10c632e, naganaland.com/i1a6
formbook, b0b1f27468552599b6e685345007b1fdbea80c2c60a914a01a6e0abdd35fcdf5, boukilio.com/sf31
formbook, b2cfd3a8cdfe508b651f6fdc788ba902c68450a0ec1c55182efa86aa989d3237, wipe.ru.com/sy2h
formbook, b49e86472e01e666fabb5e6024f7405b8e3c02c7602dba20a4d937537dbd79fa, fahrschulmobil.com/w83h
formbook, bc2ddac40ce341d13e48f7d4bf82d31a6a150339e1928e64ecd3d71522874fee, gaykolkata.com/b62r
formbook, ca5c3b92cc3d548da5a93007d123a5bf220cb07710b4db37c6516b140e789fba, rankwrestles.com/g02e
formbook, cb2693a5fad0115f35c7ede0ec30559c231e08c98831d7432fe3012fb40388d8, momentumcs.net/bs11
formbook, ce7d3bdad0d089583e735635f3d475e11dde86d0ad1c76d8735085a9ec031d96, engineerdanish.com/pd21
formbook, cfeedd9d4e2229b624972a48f3e2c61f9a66905e09c95a77088e44b513da721d, beneficity.net/e0i2
formbook, d1324ad6746ac4d0022a3501ea81785bb78304512b4041ac0eb1f3dc19a68769, mecchashonan.com/b6nt
formbook, d34ad18fe8d593f0cf5cba1fc1727d59ff6ecbf07d9537be57c2d9e78e854c8c, daesangwelllife.com/sh30
formbook, eded9c78e74ca871e5604264160e190e165349cd2b07a35ebc75e3199f0d1b70, rankwrestles.com/g02e
formbook, f2d973372cb16c6b4a4ea6a6dd1d2bc5382218528e084b233becb39ce8278201, naganaland.com/i1a6
gozi, 32c049803e5e151d305c79a1067920a7eaa2dabb92fa7f33ef950097bba016f2, 185.154.53.188
gozi, 7afb35337b5d8c5a6cc2f87d94ddea1a6748bb24fc133e2540f170a0aaf4c219, cabrioxmdes.at
guloader-formbook, 035fe118d29d14e00b56cf2b88128026c19f19a63df2a40b1408720a6e746f36, blanq.global/krnb
guloader-formbook, f0cfaaad0273ec801827d319a3fba208da4a0231dab739635c24be3707c69279, puffadder100.com/eo22
jacksbot, f16c6fc82609a69f41b0245c78aa1e8fdd5d62d0c8139fdcf3c941b2c851b5c8, jbestdeliver.duckdns.org
lokibot, 030fc89475bf878396ad49d16ce92755744137e21c842a0cddb7e2bb2d04dfb9, http://164.90.194.235/?id=16525630196024015
lokibot, 0bcb4c2c798db189132b9e70588a72df14efdc5ee998ba4203aed16fbe56960f, http://45.133.1.45/me/five/fre.php
lokibot, 10ccac80baa31a7a96f2b73fe158db6b699f27f9b89af9692a0ccc152802fb12, http://iowipalbv6atsy.tk/Concord/fre.php
lokibot, 256437833ed8f7b619648530a3248a3435d17dd43a98c29d02e96b56083ddc58, http://164.90.194.235/?id=74851800950851794
lokibot, 2d587dee11d750078844d086764e38d717816d23d0b4bca9abff96470987d3e1, http://164.90.194.235/?id=74851800950851794
lokibot, 3891aba869b31cf5145e28ff2f5294e99a1e931c317d629d54ad645106cbde88, http://62.197.136.176/wealth/five/fre.php
lokibot, 45991db7013985d9b6cb6ad796bfaa69c6569b0a1da7cc1803a2c5e4f7332760, http://62.197.136.176/li/five/fre.php
lokibot, 4f3bbac27a7a4ef0f0c858abf426b3d33ee7d6b82a4cda53ec33cb645185e55c, http://45.133.1.45/me/five/fre.php
lokibot, 5833bb5b323155bc7055ccec5ce39e093901b609ccde004f104857abca656c3a, http://45.133.1.45/me/five/fre.php
lokibot, 70c6210c244ae15160d9b15ad5928bc69abeb609e23e092f0b54f384d126c681, http://198.187.30.47/p.php?id=16819775001048824
lokibot, 90fe2164ed3a97cf5c51f6f33df753187a45fcc177192bebed7232ee561d5bda, http://controlsvr1.cf/Concord/fre.php
lokibot, bbe65b794bbd8e5950100994809d8744331b943035f93572b73830b97e59eed0, http://198.187.30.47/p.php?id=8861517276469280
lokibot, d02df058cf25707aaa40c9b7c0e2f557e4376522b04e576624fbfffc226f45a4, http://198.187.30.47/p.php?id=7706107617708711
lokibot, d2ad8919338b3d7d9a70929f6c0a74fd2f70dcb3e65a358a527573cbb6be815c, http://198.187.30.47/p.php?id=16819775001048824
lokibot, dc20351f5143916c3be56337c798bc4d6389afe08c7a2fc610283989391c3604, http://45.133.1.45/me/five/fre.php
lokibot, e467de436bdab4d5135f3e96abe24eb7b912e9b8024dc020b39c0e5df4745304, http://45.133.1.45/me/five/fre.php
lokibot, e605b963e1172b674dc389fd155cea21e00b90fba3d7a5083f7ea2b673fafbf7, http://198.187.30.47/p.php?id=8861517276469280
lokibot-formbook, 576b23d81763bc06de0bc422af86501406760eef2f670d409e7a14a939f95f40, http://62.197.136.176/wealth/five/fre.php
modiloader-xloader, 70eb3857b235b6374a891d8d2136506b52e660ed1339921b913af29a0be6e9dc, sethdukes.online/a2c8
nanocore, 1a2d3e30a57bfd9611ca7f718fdbdd81c139883b2abf580348638b01b543a500, 194.5.98.45
nanocore, 221d26db1c7c1a27ed2e31cc8efe06ff53b3dafbab4f86a5396c54f31f514aa3, 91.193.75.221
nanocore, 5075d545fc8187f1e69717af644effc6ecbf79babf598e14e01fe70846e9ec6e, deranano2.ddns.net:1187
nanocore, 90da3ccad906aeda93df03d2968fb16b66b0c85d7d4471f38fb1def5acf2dc49, deranano1.ddns.net
nanocore, a0c4f2836d7b935bd927dc9727a0391762ba85f984656e77df325f9c5e8e6db4, yefgfghh.ddns.net
nanocore, a46cede541f8b2f594b78a0479df22aceaf2a3970e254d49db9516242bc088ec, deranano2.ddns.net
nanocore, afc66c9c9649f54002024ee757e5665fd60942ad4cf20b28538c112905e0f56b, deranano1.ddns.net
oski, 94a0cb554bd232ee588e462d2f9ff61431c3731457ed1ef505f1aeb171590551, alazlfa.cf
redline, be685c54bddeb8b51ee95a8f08c89be778c6ddc99c4f45b49338b218d53a941f, 140.228.29.199:25415
remcos, 2ba283d6e029797c29072844daadcbcc8372ad960b93dfc401b581f0ec298ec3, febrem.ddns.net:2404
remcos, 38e9674277ba4eb01d8e4f3c09364b9cb75643f41d0b089eb9b2dbd66daee202, kashbilly.ddns.net:6060
remcos, 7cea994360cbb9466cc022ee3e70ea66eee287ca57646a67f5e9a8e7627d264a, nuvez111.casacam.net:2404
remcos, af0954828fe65381b0f1adb7ac6f852b776a622a8ec3d422b5d721e8e29de1b7, 136.144.41.64:2404
snakekeylogger, 24f0dacae3f61ddb0d4261a78b6493724bd2a83633e7bb4c96659bee2775cfd8, https://api.telegram.org/bot5206100572
snakekeylogger, 35edc5ef499d3d36611769047630195bb59883cd9feb7c36c7988d59d0087ba5, smtp.yandex.com
snakekeylogger, 4cd4c4540af16c17295a26f0e5395bcbf7066adc6b820e67af9405fa155e6579, valleycountysar.org
snakekeylogger, 5238d71fc51769af80408cce0d20cbdf2f1c64dc0efc1094ad86b5692e04f91e, https://api.telegram.org/bot5257540806
snakekeylogger, 64c75f9c16ae09f8ea59604b99e8c323ca2ba4918e475718c7cffaeded27432e, mail.valleycountysar.org
snakekeylogger, 704b79e1fbffd4d1c598f0a1b0daf93d46aa1d93c2ed8f43fbcaf2f7d8ed7b5b, valleycountysar.org
snakekeylogger, 72bf26bdf472006b4c7bf9017bd5387bef26a76a1cb0ddae66a361dc45bffd71, smtp.yandex.com
snakekeylogger, 7e1e3646a70447259ae1edb07291d4d0bec9bdfd8d23fb372369ea62da171a57, mail.valleycountysar.org
snakekeylogger, 8cc8900b9a835d87ac881c643c8974649144295f91f1e02dcc11996703f5edf8, valleycountysar.org
snakekeylogger, 920250bb329fcd3b5fee8a64ffa7c3df7c069c2260d0f7444984e9ab56c84527, valleycountysar.org
snakekeylogger, ac75dd1e35bb582b5749b15fc415f3a0512663db01bae9176fd17ed90a474074, valleycountysar.org
snakekeylogger, b1e70ac3f3eee60358fd67d17b8b26aa45134b1c3e3c1002765c3ea767dfedf3, smtp.yandex.com
snakekeylogger, bb6040957b0f9134f1fe01c6cc7183cd57614da5da0ae9efd225317d26e902d5, valleycountysar.org
snakekeylogger, cbacc1710062f519f72174b2e4c4246a3babd1702eadd387eba426f8baee1faf, mail.valleycountysar.org
snakekeylogger, d1b4cb0f9a8535bd5feda53dda680050cf413c436148f147e3414c4116e1ab95, mail.dmf.med.sa
snakekeylogger, f57fcdce34130debdb3150a1cb378f1ad2c8781cae2f3e9ec01c19d48b4ae9c8, valleycountysar.org
strrat, 039ee2a1901e92dbafa03a7e098dcaae1874b49f14326c8c1f782fc015726dfe, str-master.pw
xloader, 217dd6b75458397fb61777a2d2e0d80a5cef9b39c80586e6c1a39bc3ba7c9557, discover4two.com/ceah
xloader, 2385821f2732aafbdf3ddde31c314ddfaad694ad9261e4b40961b61a1a78cf64, xn--28j2b5cd.com/agsj
xloader, 29217f28c065aea88d7d7faa350a69636974dc2c9955df8c14602978f304f47a, 424964.com/m3ci
xloader, 419d9c5e31d610e3b5dae8b60cfa41d315894b8837c9ba93927c50539ffdc209, filthycarproductions.online/hu8c
xloader, 45440ff61950e60ffe3af3d1b56641f2e7b1f681510b37d25d50c0cbacecf6bc, smvopucollege.com/bh87
xloader, 471429e2686887cf2416e11d6d9c2a36f639f7b971db1d7b013b933ae3f3bd6c, irvid.info/ee3s
xloader, 4e7c66e1c2f9dae5fdf45d434a77175c7bbacb110f60a4a2a4b29a1dc6625d25, 424964.com/m3ci
xloader, 65fe281e58deb6c84b5b27e377d0c01402f9a52f07a8cd03d3b38fdb4faf0f41, e-flieger.com/eggp
xloader, 678ec645143432609d6ab55fc8b492daf0b4dc0ec1d12dbcdae96e37f119f611, filthycarproductions.online/hu8c
xloader, 7c88273247fcb72cc63b4153e079d0b034f9065ca14c4918e1519773ca27144b, sandandsawdustdesigns.com/onqi
xloader, 9c6a6119bc7008246685cb9960fe21969a8bfbbea6659e6e0afa329358c60a50, smvopucollege.com/bh87
xloader, 9e94ea964630e088c92a9caf37bbf4e9716e9490142e58f3ba84042b02461021, 424964.com/m3ci
xloader, abc2733ebbcfe0a331740481ef4d2d0d3dd7f3f7ccd9f8356fa04e6772af8e01, thelostrose.com/pg3o
xloader, b54168b037312f67799b5288b52b742ebb044ce64c3e5c8a9be56f04f9633a14, zexid.com/u5eh
xloader, c0d6833e7ba34a1a05310005fa4e09ad5e1e2b60edf8fe62fc42b7610913496c, santesha.com/cbgo
xloader, ccc3111d1efd08344fdaa03990ed7029b09e1a5f014424760b6ae2eae5539829, beautybybrin.com/ssac
xloader, d094c5a8bfae919c84a9b93e7cc14955ea7d8b95faca2aaf8c19788fbe25fb24, thelostrose.com/pg3o
xloader, d34a223dea7a06215999dd39f701ac2e22dd58ba6b41550b30c137f27623164e, xn--28j2b5cd.com/agsj
xloader, d36aed39f3fb785951a4e948bcb4f86033a398ee0ddfef85040564751918b669, irvid.info/ee3s
xloader, dbf7467f7a274e842a332d709080fbafde3fe1f20ebc36e1cd1fe0549adea9f8, thelostrose.com/pg3o
xloader, dcccbb97201914164dc8bed003f14daadfa300a6206b7ce835f6c7ee8b686405, sethdukes.online/a2c8
xloader, e9b9b1c8e972c4882a540641d04979d3c7d6c762ee64707a1a2b147d06a43326, anniebapartments.com/euv4
xloader, f9210fe490a704b0f80ad9e9b6ec91e7b1f1b3e55cd66eb7df456a4fe4e074f9, sandandsawdustdesigns.com/onqi
xloader, ff04141e60160f0454edc8feeda14c75e74b1d2a571a80d5ddc14566dc175053, makiwokuberu.com/wesd

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]