# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.prevailion.com/darkwatchman-new-fileness-techniques/
# Reference: https://www.virustotal.com/gui/ip-address/185.177.59.174/relations
# Reference: https://www.virustotal.com/gui/ip-address/91.208.206.44/relations
# Reference: https://www.virustotal.com/gui/file/409839f9c8327eff6208aeca4f7113f5a0abdfa97f266f404b14f9fa6ab1432f/detection
# Reference: https://www.virustotal.com/gui/file/ce1eee6b86bbc352e9ad69b7e241dd7cf08dc60ced259087f72c33396f65093b/detection
# Reference: https://www.virustotal.com/gui/file/003ef083b27eb13b5ca6a39a7aaed359c5e7dae5a872cb569cdf69332bb56ad3/detection
# Reference: https://www.virustotal.com/gui/file/e8681efd888395026e420acffe3df7b45e990d0a917aec3f09c741d4d8ccfba6/detection

03d5e3f0.top
0a63afdb.top
0d0e6bc2.top
13789e9a.top
14155a83.top
1aced2b1.top
1b6cbc0a.top
1c017813.top
31e38172.top
3548cd93.top
3855cd59.top
3a60dc39.top
3d0d1820.top
3f380940.top
424ffd05.top
4522391c.top
46e4b1e4.top
483f39d6.top
4a0a28b6.top
4d67ecaf.top
4f52fdcf.top
63126a15.top
647fae0c.top
6b064885.top
6c6b8c9c.top
6dc9e227.top
74d2d366.top
7a095b54.top
7d649f4d.top
8265edb0.top
850829a9.top
8a71cf20.top
8cbe6582.top
8d1c0b39.top
936afe61.top
94073a78.top
a15c9ce3.top
a3698d83.top
a404499a.top
a63158fa.top
ac419c29.top
adb205b1.top
bfdb1290.top
d136686c.top
d303790c.top
d46ebd15.top
d65bac75.top
dab53527.top
db46acbf.top
e3000aee.top
e46dcef7.top
f20f193f.top
f562dd26.top
fa1b3baf.top
fbb95514.top
fd76ffb6.top

# Reference: https://twitter.com/suyog41/status/1643967451682729986
# Reference: https://www.virustotal.com/gui/ip-address/193.149.176.127/relations
# Reference: https://www.virustotal.com/gui/file/3898cd3d7c26c3fd142ee62ffaee418ddc5a7247b6148181e6abb0d29824df2a/detection
# Reference: https://www.virustotal.com/gui/file/75b46ff876cfefd598f2afe7e71c5bd3ca284b348426324049a59a9215cf39b8/detection
# Reference: https://www.virustotal.com/gui/file/094b0de76f9afd1fee8ec890edb6fb46b302bc57c1bd7b4a96746b1dcf0794a9/detection

025ad916.cyou
025ad916.icu
025ad916.shop
052e5f3f.cyou
052e5f3f.icu
052e5f3f.shop
08335ff5.cyou
08335ff5.icu
08335ff5.shop
0f580158.cyou
0f580158.icu
0f580158.shop
0f5e9bec.cyou
0f5e9bec.icu
0f5e9bec.shop
1ee79f0e.cyou
1ee79f0e.icu
1ee79f0e.shop
21625cd2.cyou
21625cd2.icu
21625cd2.shop
231e0c36.cyou
231e0c36.icu
231e0c36.shop
2473c82f.cyou
2473c82f.icu
2473c82f.shop
260f98cb.cyou
260f98cb.icu
260f98cb.shop
28d410f9.cyou
28d410f9.icu
28d410f9.shop
3a053d77.cyou
3a053d77.icu
3a053d77.shop
3d68f96e.cyou
3d68f96e.icu
3d68f96e.shop
4a6fc9f8.cyou
4a6fc9f8.icu
4a6fc9f8.shop
4d020de1.cyou
4d020de1.icu
4d020de1.shop
4fad40dc.cyou
4fad40dc.icu
4fad40dc.shop
5108a85d.cyou
5108a85d.icu
5108a85d.shop
5126a432.cyou
5126a432.icu
5126a432.shop
5374f8b9.cyou
5374f8b9.icu
5374f8b9.shop
54193ca0.cyou
54193ca0.icu
54193ca0.shop
56656c44.cyou
56656c44.icu
56656c44.shop
5fd3206f.cyou
5fd3206f.icu
5fd3206f.shop
6b02f7da.cyou
6b02f7da.icu
6b02f7da.shop
6ec6f49c.cyou
6ec6f49c.icu
6ec6f49c.shop
6f5a23d4.cyou
6f5a23d4.icu
6f5a23d4.shop
72296fa9.cyou
72296fa9.icu
72296fa9.shop
7544abb0.cyou
7544abb0.shop
7859ab7a.cyou
7859ab7a.icu
7859ab7a.shop
7f346f63.cyou
7f346f63.icu
7f346f63.shop
832db572.cyou
832db572.icu
832db572.shop
913a0e4f.cyou
913a0e4f.icu
913a0e4f.shop
9256ecbe.cyou
9256ecbe.icu
9256ecbe.shop
9657ca56.cyou
9657ca56.icu
9657ca56.shop
988c4264.cyou
988c4264.icu
988c4264.shop
9a9a8b91.cyou
9a9a8b91.icu
9a9a8b91.shop
9b4aca9c.cyou
9b4aca9c.icu
9b4aca9c.shop
9c270e85.cyou
9c270e85.icu
9c270e85.shop
9da3ecce.cyou
9da3ecce.icu
9da3ecce.shop
9fb2b319.cyou
9fb2b319.icu
9fb2b319.shop
a30c6ccd.cyou
a30c6ccd.icu
a30c6ccd.shop
a461a8d4.cyou
a461a8d4.icu
a461a8d4.shop
aaba20e6.cyou
aaba20e6.icu
aaba20e6.shop
b2a97b8f.cyou
b2a97b8f.icu
b2a97b8f.shop
b3a111a7.cyou
b3a111a7.icu
b3a111a7.shop
b8530e71.cyou
b8530e71.icu
b8530e71.shop
b86b0d68.cyou
b86b0d68.icu
b86b0d68.shop
ba175d8c.cyou
ba175d8c.icu
ba175d8c.shop
bd7a9995.cyou
bd7a9995.icu
bd7a9995.shop
beb73561.cyou
beb73561.icu
beb73561.shop
bf06c971.cyou
bf06c971.icu
bf06c971.shop
c4a62131.cyou
c4a62131.icu
c4a62131.shop
c801f9e7.cyou
c801f9e7.icu
c801f9e7.shop
ca7da903.cyou
ca7da903.icu
ca7da903.shop
cd106d1a.cyou
cd106d1a.icu
cd106d1a.shop
cf6c3dfe.cyou
cf6c3dfe.icu
cf6c3dfe.shop
d3669842.cyou
d3669842.icu
d3669842.shop
d40b5c5b.cyou
d40b5c5b.icu
d40b5c5b.shop
d5ac39cb.cyou
d5ac39cb.icu
d5ac39cb.shop
ddbd1070.cyou
ddbd1070.icu
ddbd1070.shop
e150fac0.cyou
e150fac0.icu
e150fac0.shop
e63d3ed9.cyou
e63d3ed9.icu
e63d3ed9.shop
eb203e13.cyou
eb203e13.icu
eb203e13.shop
ec311447.cyou
ec311447.icu
ec311447.shop
ec4dfa0a.cyou
ec4dfa0a.icu
ec4dfa0a.shop
eeca47ca.cyou
eeca47ca.icu
eeca47ca.shop
ef8b72f2.cyou
ef8b72f2.icu
ef8b72f2.shop
f8831f57.cyou
f8831f57.icu
f8831f57.shop

# Reference: https://blog.cyble.com/2023/05/05/sophisticated-darkwatchman-rat-spreads-through-phishing-sites/
# Reference: https://otx.alienvault.com/pulse/645be9d36c7e94fb4d3cf001

cryptopro-download.one
