# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: gurcu stealer

# Reference: https://twitter.com/0xToxin/status/1660533135526834176
# Reference: https://www.virustotal.com/gui/file/c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7/detection

140.238.218.94:8080

# Reference: https://twitter.com/Jane_0sint/status/1661783841454039040
# Reference: https://app.any.run/tasks/0b0e6ff6-afa1-4645-811a-f1f8bd54952f/

83.137.50.106:8500

# Reference: https://www.virustotal.com/gui/file/0fa222fb1c108d47b8d3e7c54753774d5f5098b462c5231a64031a574509a6f3/detection

134.202.120.23:9000
144.76.201.253:4080

# Reference: https://russianpanda.com/2023/07/04/WhiteSnake-Stealer-Malware-Analysis/

http://106.3.136.82
http://154.31.165.232
http://18.171.15.157
http://185.217.98.121
http://216.250.190.139
http://45.132.96.113
http://5.181.12.94
http://66.42.56.128
http://8.130.31.155
http://85.8.181.218
104.168.22.46:8090
106.15.66.6:8080
106.55.134.246:8080
116.196.97.232:8080
116.202.101.219:8080
123.129.217.85:8080
124.223.67.212:5555
139.224.8.231:8080
144.22.39.186:8080
172.104.152.202:8080
172.245.180.159:2233
185.18.206.168:8080
195.201.135.141:9202
205.185.123.66:8080
212.154.86.44:83
212.87.204.196:8080
212.87.204.197:8080
81.24.11.40:8080
