gistfile1.txt

Date,Details,Email Payload Type,Users Targeted
5/2/2025,Purchase Order No.13648045|Purchase Order.; zip -> xloader,Attachment,5
5/5/2025,Purchase Order (PO); exe -> xloader,Attachment,7
5/6/2025,OUR REF: RET-402-1438; zip -> js -> snakekeylogger,Attachment,3
5/7/2025,RE:NEW ORDER|RE: NEW ORDER ENQUIRY; 7z|zip -> xloader,Attachment,12
5/7/2025,shipping documents for Cable quilt; rar -> snakekeylogger,Attachment,2
5/14/2025,"Shipment Document BL,INV and packing; ace -> remcos continued to 5/16",Attachment,6
5/21/2025,Statement of Account Dated 21th May|PO2212020001 Suzhou Huijun Technology; ace -> remcos,Attachment,8
5/21/2025,RE: FINAL SHIPPING DOCS; r15 -> masslogger,Attachment,2
5/27/2025,Shipping Documents; 7z -> xloader,Attachment,21
5/28/2025,[ORDER] POSPHL0002653 Projector Pro2 Refurbished Order# 49763; 7z -> snakekeylogger,Attachment,2
5/29/2025,Payment Remittance; zip -> xloader,Attachment,6

darkcloud, 2d1dd37c3915997fc19c4e01e6daa7f518782d5dba0cfccf9947703ed6ca7c04, mail.novo-consulting.in
darkcloud, 5417229bf44b88674f64659ba5d6ccb9462de9be7e51aaf6d509c1be6f0bff06, mail.jabeschile.cl
dbatloader-remcos, d495db198789f3816ec742b8160ddc06b324da906f951cb75d1f2c373b856663, activenowdnsme.duckdns.org:2065
guloader-remcos, adba005a3b16e2b8451dc87c3eaa2708c74debf559ec6280a529f588895254b4, 104.37.4.144:2404
masslogger, 051e5a94a6c94d57cf8231fbc78a1e33ae444bbeba7ffeccaaf1f0549a8e7e90, mail.aounfood.com
masslogger, 1c6e05a63fd293c35c3aea739efbcd442e4b9b54e0dafa7385787d4d1ffc9f24, https://api.telegram.org/bot7708941755
masslogger, 31e7d9343c6377ee6bdd387b613b77423e25f9983b612903b86ec5361b41e7a9, mail.telemaxjo.com
masslogger, 348d96514ff4a0006e2209eaa1e6e07cef0f28dfacec3aa4e69741a8b9637db6, mail.dhakahome.com
masslogger, 53055b6d2651d5c6b4a0bf9ee2f50c73918e65c9d36acfd10eb2eefb0d3e957f, mail.dhakahome.com
masslogger, 7850f54467f5d3de3030cfe2362fab85d84861658f760c9481bb269ea4e6017d, mail.sarahfoils.com
masslogger, 90de8c395fd4b0a2c0cfcebff04f087535c025bb838fef8c3f20b734e2334f52, mail.dhakahome.com
masslogger, b029c85c2f3c54e7c387aba591a25213eb0c0bd31ee322e56bfd58eaacc60c26, mail.sarahfoils.com
masslogger, b1f74a3da6549a5a2f17264da736756d47be4f4d815248815825cb5f997f9091, mail.dhakahome.com
masslogger, b21dd690adb6a52b9ff48a6952ec02e64048dd4c28226775742644bce3cf6b3a, mail.sarahfoils.com
originlogger, 1f17ccbd43f941b1a79412d24ad8e60f33a916d3fe73c257d65d7954313f8f5e, ftp://176.65.144.23
originlogger, b7268f9814ddac66d6a4c1c43115d19de4fdb23e4d30ae233aeb51127213a1df, mail.chinaplasticsac.com
originlogger, e7fe9e523887413bf60b4a2456411c3b45eff4e0e6f7566dc4c491dc52c8aad1, mail.eanlabel.com
originlogger, fb50faa852bc2917ace3552b02c754c91872d0892e247f51a1e48336e598d6ef, mail.eanlabel.com
originlogger, fd0049f3bb1393c8192f8053301b8472a18f1bbedb4011655d756fbf3a0b3aa5, ftp://176.65.144.23
remcos, 059bcc0024f1533c5d63e3dde7ef187be956b855fd3f8792673cd575e053050a, 23.146.242.237:5817
remcos, 429a93e7b3f98aaa621cf9c8e86b89d11d8b103207364c7d8a5f7a9949b3f16c, 23.146.242.237:5817
remcos, 53e050000913565123e12dd55564f60472ec53dd4c3273f6ce341406b2577094, 23.146.242.237:5817
remcos, 544d1d3e2717f0f78c332cb3b1e234c5a6dabd2a4aff547aff382d1e802bfdcf, enermax-com.cc:2404
remcos, 6f1ddb53c3659c4aa4060229d591081b96bf56337238ca8594dc0dd5f939caaa, 23.146.242.237:5817
remcos, 8ea1191cb0262d9bc190a308cbd4482ad6f03d789606086a5abf08e14eaaea42, 23.146.242.237:5817
remcos, b8af0c741224f1b88f0ce141c967d0212ed41686a32ac3cc461c7f624735c646, 23.146.242.237:5817
remcos, ba1b869e5e44cc25d8128cd5f25bf37b3bdfc986b1d74cbc506b2cc129f308a1, 196.251.92.49:51010
remcos, bafbf84f740baa0a511a85ced8d2cbf498d40aa796e41c42c3c767e7566eca85, oni22.duckdns.org:42555
remcos, c25de9a5c2efbf673a3b52e41884668057757a230399e76fcf29156499d540c9, may2025.duckdns.org
remcos, d56df9be7fc5ff907c8e58dc441a31bc7d75c354d83e96ba814e69138929583b, oni17.duckdns.org:51010
reverseloader-xloader, dd4740425fc72977763971004cbfbaea0205e37848b53fec69672bf5e53d7650, www.gametracker.com//sivs
snakekeylogger, 0f113c5ca5338e176dcf7be698f05968a071ffa1763b405ee70407eee7037c39, mail.villsunlab.com
snakekeylogger, 17277418809bfc803df5fcb1aff0b1268fac38210e2eca8a555bee9f85492e9a, https://api.telegram.org/bot7658357451
snakekeylogger, 27a75e446f2d1dc7c46d6b80696fdbb9fb3f70c624e9fe6ca15c517e9435e2fb, mail.villsunlab.com
snakekeylogger, 2ac628698f61b8075e480a2ded40f35a37700b3979b68bfe3ba8d216e81395ac, https://api.telegram.org/bot8146780794
snakekeylogger, 2f674af3c9a19266db54861ec23ee890beea1e3446123328bdcb82103895158f, https://api.telegram.org/bot7285175953
snakekeylogger, 3007d30524bd16e245c2758c9c70d2a25eeb17b583c6156f9ecc50d19f133904, https://api.telegram.org/bot7954897599
snakekeylogger, 3c9b7c02ab283c1ff3b9420c19b557b1ec5d4517ef6878a4949bf8d05b341e05, https://api.telegram.org/bot7285175953
snakekeylogger, 52843d737e9578b50ab5ad397368afd80eb72bd26905ced2742ca5d56d348b84, mail.villsunlab.com
snakekeylogger, 5b88b6c17c7b6d7244bf0d96abb8192c27d3945f201ae910b8c8936544cf0072, https://api.telegram.org/bot8076914767
snakekeylogger, 617a4e7ecf0aa360735368ced0894f2c6676931888e3dc9b8a9400c3d1fe6cf4, https://api.telegram.org/bot7285175953
snakekeylogger, 62fc9b54c1008908864a914d226e49bfba55301154ee9d92290ea3aec4a9b00d, https://api.telegram.org/bot7658357451
snakekeylogger, 74142a16663b8e31737676dcfe1d4216b74e4cd0d176215b1067fb5694481c3f, https://api.telegram.org/bot7341689230
snakekeylogger, 88cdc8636f78b3594000a95f10e3a9ee30944ff723f24d6695dd1615ee2bbb21, https://api.telegram.org/bot7409572452
snakekeylogger, 8a7b999d53aa1a5960013655864abc5e43a24611f7d5c6eba72e9a3337697689, https://api.telegram.org/bot7954897599
snakekeylogger, 9811697db89f5a251833af25fa949e001eeda086845078329204e75fcfaa5616, fiber13.dnsiaas.com
snakekeylogger, a5813ea81c5de5308aafb9af6fe9e0bd51733e3f85be67a097d67c15916c7722, https://api.telegram.org/bot7525210835
snakekeylogger, b6b29219bd74912c7ed03a4648db8d6589079fa0890f93d1e9bef149c8e58a00, mail.sunrisefreight.com
snakekeylogger, c1ef6e1e3958a4233121bbee3928c441cc4da74c927fc4d8a685a1e38f98b851, https://api.telegram.org/bot7954897599
snakekeylogger, c4d09e3feb7bc016940c0ee7aad4e23daba2a0fb4f6e00f193cfd88d52f43b93, https://api.telegram.org/bot7341689230
snakekeylogger, c6e7f1dfe1147b82aa1a3f872cbfa81183d777911edc6a4623255b7db6cf0d86, https://api.telegram.org/bot7950066405
snakekeylogger, ca501cfb9dbf6a68286e02c1ecb2ad35243d37b06f430a99efd229f6b0be187c, mail.sarahfoils.com
snakekeylogger, d482c0420e5f9969243546120d50e946f08bbd6890974134521feac32464e2cb, https://api.telegram.org/bot8146780794
snakekeylogger, d95ff41bfbaa705e05507570aad939636676d3a691814214998c7b8607f93cd1, https://api.telegram.org/bot7341689230
snakekeylogger, dbf48e91ef60bdc165c1463dd401d2668363ab968c7620b85dd71f0cdb3fdaaf, mail.sarahfoils.com
snakekeylogger, de7c16ba753ed448c9e9afc90f0b474dcedddb2e4b60ddaa5abf87cca6b7af3b, https://api.telegram.org/bot7285175953
snakekeylogger, f189b4984051d8ad1499703a8a3719bdd0f4aae921416171443758e321a52246, mail.villsunlab.com
snakekeylogger, f61db63d8055c98f1c4c11de558dd0f2f7f6fbd755dd5de8b60cdec9fe53ab70, mail.unitechautomations.com
snakekeylogger, f80ddb5ecac613a92672a5f7f05f5420df214c5579ebf7bc48abe9d069e23674, mail.villsunlab.com
vipkeylogger, 6ecc1c377c5dd756986b46c4aff8d7ecdfe82df758b77d43f55c31bd3cd87685, https://api.telegram.org/bot8195548441
xloader, 0013e6d899c343df37d42e9aea6a40a035021195b544f6c442ff98094501b5a0, www.gsp657.top/hi13/
xloader, 0169a81ca5a7f3c8c6af6dde12ab0033476b69ee818293e806cb734ab166dc17, ctopeaux.shop/hi26
xloader, 024537bcb5cb2e33a164a13fa87e13dfc129efe2dd656084f3954f4ba5a821e1, olidspot.shop/hi13
xloader, 0578eeb29bd6418a75a34d5809cc64bcf903cab949060ad38cb2224d23bec10c, http://www.onety.skin/hi13
xloader, 078cd1b6995a95e2057591899a7050da5799ad226afefd75fd442060efd1b027, ompanion.bio/hi13
xloader, 15525aadbe6cafed08453ddf093153bdf7faeb2d19f22349a31bf59f79c5e03b, arinsurancehints.xyz/fs24
xloader, 1c6509be8089e6a9eaf0a237adbd0b2d8932625ec14dc96dc6b4b732d4285f2f, http://www.swordsandbox.xyz/6kif/
xloader, 1f814c5bb5de09b7966ff50651b226de4a92951cffa6f6dec077e1eb8fda24c2, www.dgdetailing.pro/m88p
xloader, 280a6134113df4030679a57174accffb38dcbbe4263c149b1464fb3ef6eac0c8, http://www.encorebrands.info/ghra/
xloader, 285bd22ba49a3de603e9fff856a0bd3111e43629ad29e24bb41178afd93ece23, olidspot.shop/hi13
xloader, 2fdfd270089733a9640de6558cc32b8655251a6fe1d8032ff03a72413de8cd2e, http://www.livego.app/11np
xloader, 32d50ecb4524fb4ffef1c803294ef82e99e5de657d862ffbdba721d6f2d0a8cf, www.turbocloud.website/w0gr
xloader, 340413546b07d2304e38dd304e8555b93d38bb6eba786878e975551a5c36c937, http://www.noahsandoval.store/e34x/
xloader, 39e11f2bdd09476c13e08a87c37e9097c6868f5bf5b6b536a2e1016ca1d4612c, www.arinsurancehints.xyx
xloader, 3d6efd2429fe693844fe05ea6f6be18861f4d92c839520a4f5343a514905ee7e, www.parshmen.art/4npf
xloader, 3ed4bc75f282f2343cc408d81b790d84fc1d39e11709cd3cb3496217ded30dad, www.5794.loan/g91p
xloader, 3ff3db68a75d4c52f3910396564f35999b3571ed75850df0c403b851433582ec, ilansocials.online/bi14
xloader, 4b648e5f7ae88af3cafe6877e9acaa11e6006b44d5f96c2a8df1d68585bdea85, http://www.tqzjixmd.biz/1kjg
xloader, 5db250fb2ab758b4a3eaefe43070c2bf4be8ccd1fef3094b537ca602327220e7, http://www.craftytee.net/m3nx/
xloader, 5f63d86d5175fe1b15194dedb48e5eadb0ae1f4656b3ca86a2055df558bdcafc, olidspot.shop/hi13
xloader, 6174325a618dc0074601bbf4181a7cac9245e99449ebf0a8080511fbe3e7c62e, ilansocials.online/bi14
xloader, 67873f2ddd6bc277bea8dd92d6f5df68b66bfff8a37061206a9bac74a29cf0cd, http://www.decentral.business/65jo/
xloader, 68f21baa9f00e498b8b31630e46addb81a4b4ef3f86d097708b6d6540fdcc8ac, olidspot.shop/hi13
xloader, 7499f69524a85e3fef6b56b14254f87ba6733de5c21f2b0fac5832aeb095e77e, ilansocials.online/bi14
xloader, 80178f684d8914808b1717c7b39b77bbfe616859cee6e117be0f25a99c02fc76, ilansocials.online/bi14
xloader, 80c1a0b48688c83d7c1532da5d5871618838eea438a4262a0c36ff21d5914c2f, olidspot.shop/hi13
xloader, 83cdcf1f7b8b580c62b4bc74e0ec2eb1fb18e2229335179d4f333c6b5f52f4ae, olidspot.shop/hi13
xloader, 8794b12ebc79acd077de77153363bcef2007aa4e3215d0b0a532156b8a15ae55, ctopeaux.shop/hi26
xloader, 88edce54585b6fd0c886090c53e8f8db451fe67eb1bbafbeac17fcbd694392e8, olidspot.shop/hi13
xloader, 8be603d66148c712db208a6a43f50306ff49d1964b66d43545eb73379d777374, http://www.uqcdnvgr.biz/mfiy/
xloader, 8e564a2a0e1bdb442649ba702cfb4ebfaa4d28a1e404d9f6ba44a06398008e16, http://www.tqzjixmd.biz/1kjg
xloader, 92a1ad888b22ca47be4db19ee34758c7ff6ca120cc4a03cdf6171e5870557273, tartweb.click/le23
xloader, 94163acffdebc6200200d28240e4c3e92302b32b68cf06e0beca98e42edf2bed, http://www.dfsdfgergrrtth.online/9udw/
xloader, 99a9e7ba21ee6076010e05e9e24d5607ad4e58c4d9dd57fa5c2545c4abc4e548, http://www.uqcdnvgr.biz/z7hp/
xloader, 9b31fc365306a5daf428f34c69eea9d8f52aa5f18839b6b097cc3c55d4134de8, www.fasadmebelchelny.store/8hf9
xloader, a145db69d6c415c02ccc61c4803afd607cf53b6de7899be395da98f094a578d4, www.droneapp.xyz/x2r1
xloader, a32a1590d555e671aed186dd54bf92bd97a2ba545015ff229fa5fd4f2083bafa, anguage-courses-48869.bond/dy23
xloader, a87d275ebd05d10612525aa2cc02e4d54a2a77727e32e63ea5e3e10fe0c906f9, http://www.craftytee.net/lyu1/
xloader, afd70caffabff2fd76c60cc4f306648b9ce5f76e2c8a8936a6add5a26f5a95e6, https://www.mbalib.com/ysql/
xloader, b1a869954b7b6bec6219fdf54b993627616c66c4fd1b31299288cdde030d0130, http://www.instella.net/90hd/
xloader, bb9b25429b64dac86f905510cb58b7041526be308db8f6324e7ef48fa5ef3750, www.cravatte.xyz/lfkw
xloader, c104432a782e1a6b0e1ceaf38ab3391fde1e83e62ab314f004f458fdac0d7bef, www.hagitkoren.online/wwt9
xloader, c1c00010345501efb3b6d771a393a42cd4dd060c2d359c0dcf8054c1f03836e4, http://www.uqcdnvgr.biz/z7hp/
xloader, c3f39d499f8599e009697219a0c0f9b5fd91848b693fcaf4abdc0d15bdc67de0, ilansocials.online/bi14
xloader, c6c4432433d8b941918424991c48d57fef0d0dfedc26b8fec66422f58c2ec8c5, http://www.jefebusyness.net/d7js/
xloader, df898007e1517349ff3254eee2650fc870569478eaba486d3dff939e07fda9c7, http://www.echowok.xyz/rfor
xloader, e1823fe9436e134f4f1c0768e61de2df7f7d9bbce50a5acf103153c065e10b40, http://www.ikure.health/tobo/
xloader, e9a893ad0eb9df775762446c8a2ae14f407248c56964fee9443172e2834ee9bd, http://www.worrr17.homes/iope
xloader, ebd2046bad994314fb7af77d32ddc47327100bd8b9607bc7567dfcf2bf701e32, http://www.idgluxe.shop/d9n5/
xloader, f05c1eb2caa8096345ebe0e944c24a81cc0ca0668458d9bdde758a9b17f010c4, www.expertscloud.xyz/jmyp
xloader, f24a8111441d3ecfe8cfaaa5ebd4347b32f2d467f2291f0255873f197560bce3, www.talklayers.xyz/dm53
xloader, fdc4524cb10912160c584d8a05d97833bea27c7805de8b43e3d5e4347b29f1a8, ilansocials.online/bi14
xloader, fe425f034245df80aa7de7f613c39ecc9801077ccb38d23f153ba9076c1e6f35, ilansocials.online/bi14


[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]