Hey folks, here’s a brief table of kits i came across today (10/14). I’ll eventually get around to uploading them to malshare.
| URL | IP | Whois/SOA | Exfil |
|---|---|---|---|
| allstarsportscamps[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| alwaysamanda[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| americanlasikcenter[.]icu/latest-onedrive[.]zip | 45[.]148[.]120[.]105 | N/A | wb7885598@gmail[.]com |
| asb[.]co[.]nz[.]bex-net[.]ga/tax/asb[.]zip | 13[.]52[.]214[.]103 | soa@freenom[.]com | real_agency@yahoo[.]com birdmanbambam@gmail[.]com |
| bonercubbyboxers[.]xyz/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| bugcodashop[.]eventfreenew1[.]gq/codashopberlvl[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | storboss9@gmail[.]com |
| buycoolstuff[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| caraworld[.]club/log[.]zip | 162[.]0[.]235[.]150 | cpanel@tech[.]namecheap[.]com | formulainter5@gmail[.]com |
| chkavail[.]tk/ltjfg/officeW365[.]zip | 167[.]172[.]148[.]221 | soa@freenom[.]com | Robertkhamann@gmail[.]com |
| codashop[.]eventfreenew1[.]gq/codashopberlvl[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | storboss9@gmail[.]com |
| cordbloodoptions[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| dfwdrwdgdvr[.]cf/amaz%20(1)[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| dfwdrwdgdvr[.]gq/amaz%20(1)[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| dfwdrwdgdvr[.]ml/amazon17[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | btsmpil@gmail[.]com kabiyesi@zoho[.]com |
| diamond[.]eventfreenew1[.]tk/SC-DIAMOND-LEVEL-1[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | emailkalian@gmail[.]com |
| diamond[.]eventgratis2[.]tk/SC-DIAMOND-LEVEL-1[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | emailkalian@gmail[.]com |
| diamond[.]eventgratis2[.]tk/Sc%20Scar%20Dan%20Bundle%20New%20Jeky%20Sulung%20(SFILE[.]MOBI)[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | jekybarier@gmail[.]com |
| freeclaimss[.]gq/SC%20PHISING%20DM%20FF%20BY%20KHOIRUL[.]zip | 161[.]97[.]97[.]217 | root@log[.]roxinatehostlive[.]com | tantowibowo1997@gmail[.]com |
| glencore[.]ml/ppl/godaddy[.]zip | 192[.]232[.]196[.]172 | soa@freenom[.]com | mark[.]mcgraw111@gmail[.]com |
| grandbayproperties[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| habiloitadolesparacondocir-triciclos[.]tk/il/x[.]zip | 198[.]57[.]243[.]41 | root@gator2011[.]hostgator[.]com | writes to file: culo[.]html |
| incubatorskingratis[.]info-ff99[.]cf/Script%20Reedit%20Codashop(AlanGamers)[.]zip | 89[.]40[.]1[.]36 | root@cloud[.]neverhosted[.]my[.]id | jekygradi@gmail[.]com |
| istitmarnet[.]club/A/excel-RD42[.]zip | 162[.]241[.]222[.]107 | dns@jomax[.]net | rentfredl@gmail[.]com |
| istitmarnet[.]club/c/excel-RD42[.]zip | 162[.]241[.]222[.]107 | dns@jomax[.]net | rentfredl@gmail[.]com |
| istitmarnet[.]club/P/excel-RD42[.]zip | 162[.]241[.]222[.]107 | dns@jomax[.]net | rentfredl@gmail[.]com |
| iventerbaru2020[.]freefirebug[.]ml/Sc%20FF%20Shotgun%20Rampage%202020[.]zip | 95[.]111[.]241[.]149 | root@cloud[.]imflorethosting[.]my[.]id | your[.]email@gmail[.]com (unconfigured) |
| mypremiumkitchen[.]icu/tbconline[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| passionmansion[.]icu/of1[.]zip | 45[.]148[.]120[.]105 | root@45-148-120-105[.]cprapid[.]com | Ronniesimp2@gmail[.]com logs[.]box45@yandex[.]com |
| ridgediagnostics[.]xyz/bog[.]ge1[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| savingmomstime[.]xyz/bog[.]ge1[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| sdffgewr[.]ga/amaz[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| sdffgewr[.]tk/amaz[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| svsdsswer[.]ml/amaz[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| svsdsswer[.]tk/amaz[.]zip | 185[.]221[.]216[.]4 | markusm122@yahoo[.]com | collinshofmann@outlook[.]com castilloalphonso@gmail[.]com |
| wingssportsgrill[.]icu/bog[.]ge1[.]zip | 5[.]182[.]211[.]121 | root@5-182-211-121[.]cprapid[.]com | zate123man@gmail[.]com |
| SHA256 Hash | URL |
|---|---|
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | allstarsportscamps[.]icu/tbconline[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | alwaysamanda[.]icu/tbconline[.]zip |
| a7e1f26da0a141bb8a8f46d930b713f71700ebb612cd6ccdb90423364bc743bb | americanlasikcenter[.]icu/latest-onedrive[.]zip |
| 6815dbe0a994f983dd3fd1306d2f127b8d31a4ff2feaaded0587de731ab25821 | asb[.]co[.]nz[.]bex-net[.]ga/tax/asb[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | bonercubbyboxers[.]xyz/tbconline[.]zip |
| c873eea3a76e11849606ae567cf574df8c765742ad53383ad1d8abbd5e41175a | bugcodashop[.]eventfreenew1[.]gq/codashopberlvl[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | buycoolstuff[.]icu/tbconline[.]zip |
| a8dfd068b40bbfda8b29dc87e89cebb0422b2fb03d39119c4f2f0a31ef0d89c4 | caraworld[.]club/log[.]zip |
| f0eb2e1099f363d6a4f58a2b72c859ad2afe2fe56c575c8c13054cfb2037a075 | chkavail[.]tk/ltjfg/officeW365[.]zip |
| c873eea3a76e11849606ae567cf574df8c765742ad53383ad1d8abbd5e41175a | codashop[.]eventfreenew1[.]gq/codashopberlvl[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | cordbloodoptions[.]icu/tbconline[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | dfwdrwdgdvr[.]cf/amaz%20(1)[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | dfwdrwdgdvr[.]gq/amaz%20(1)[.]zip |
| 6ea0d1216834cfa9ad76851624a6b71b63c49de3de486a203d945569c093bade | dfwdrwdgdvr[.]ml/amazon17[.]zip |
| c61712d18ebc87f882614b39fc122cfc89415452543ab60a45f807884a96c94e | diamond[.]eventfreenew1[.]tk/SC-DIAMOND-LEVEL-1[.]zip |
| c61712d18ebc87f882614b39fc122cfc89415452543ab60a45f807884a96c94e | diamond[.]eventgratis2[.]tk/SC-DIAMOND-LEVEL-1[.]zip |
| 43a98263aecc2a315a9888a3eab3201de55409c8d1c9babb7abf16906d64277d | diamond[.]eventgratis2[.]tk/Sc%20Scar%20Dan%20Bundle%20New%20Jeky%20Sulung%20(SFILE[.]MOBI)[.]zip |
| d8d47b5bcd82e9c76dd1cfd7a39849bb401f81115a0c5d407df894429cf4ead2 | freeclaimss[.]gq/SC%20PHISING%20DM%20FF%20BY%20KHOIRUL[.]zip |
| 99f9fb220d66a4bea1529b52d50ad3d4d26613aa218b094305b08250d357ff0c | glencore[.]ml/ppl/godaddy[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | grandbayproperties[.]icu/tbconline[.]zip |
| 62cf2f8dff3ac0dc700010f736e9bdd41986920259f33071c6d3c03922e4be51 | habiloitadolesparacondocir-triciclos[.]tk/il/x[.]zip |
| fdaa7e913aac488b65f7e0d9f74158106f8ac5ac7d8dd3641df32b0836f80810 | incubatorskingratis[.]info-ff99[.]cf/Script%20Reedit%20Codashop(AlanGamers)[.]zip |
| 48322e20bef519b46883a318850603e7d44fa9dedf3a9fd4063d0722a19a429b | istitmarnet[.]club/A/excel-RD42[.]zip |
| 48322e20bef519b46883a318850603e7d44fa9dedf3a9fd4063d0722a19a429b | istitmarnet[.]club/c/excel-RD42[.]zip |
| 48322e20bef519b46883a318850603e7d44fa9dedf3a9fd4063d0722a19a429b | istitmarnet[.]club/P/excel-RD42[.]zip |
| 50045af1b9dd67783cf1ef531621ec0dc629717e8d5862a4c0cc417f6d92dedf | iventerbaru2020[.]freefirebug[.]ml/Sc%20FF%20Shotgun%20Rampage%202020[.]zip |
| ced6572da78ecd3184e075002701b2ac7e3ccacc51a9e626c4844f73d780fb75 | mypremiumkitchen[.]icu/tbconline[.]zip |
| adec950bd5580210d3f24ef91749f2ccb05dc95100213ee80bf3f9a29d7a8821 | passionmansion[.]icu/of1[.]zip |
| b57612e972f10c841d3452801b0605241c1d48ee488838a8f76e2a5c2ef48785 | ridgediagnostics[.]xyz/bog[.]ge1[.]zip |
| b57612e972f10c841d3452801b0605241c1d48ee488838a8f76e2a5c2ef48785 | savingmomstime[.]xyz/bog[.]ge1[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | sdffgewr[.]ga/amaz[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | sdffgewr[.]tk/amaz[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | svsdsswer[.]ml/amaz[.]zip |
| b36a436adff6d98ebfe70a5cfe68e65010d6e8fe7b861496b207a95a8d5cedbf | svsdsswer[.]tk/amaz[.]zip |
| b57612e972f10c841d3452801b0605241c1d48ee488838a8f76e2a5c2ef48785 | wingssportsgrill[.]icu/bog[.]ge1[.]zip |