silence-is-best/gist:23738d87475d67d843bd79231b008e5a

## gistfile1.txt
Date,Summary ,Details,Email Payload Type,Users Targeted
9/2/2023,Malicious email campaign; morning,<email address> You have an incoming invoice; rar -> formbook,Attachment,3
9/6/2023,Malicious email campaign; evening,Re:Euro Payment Only//Revise Invoice to Euro Currency//Provide Euro Bank Details; z -> agenttesla,Attachment,2
9/6/2023,Malicious email campaign; morning,New Purchase Order; doc -> nanocore,Attachment,2
9/6/2023,Malicious email campaign; morning,Pending Invoice payments; zip -> agenttesla,Attachment,6
9/6/2023,Malicious email campaign; evening,New order#2_W43550970; zip -> agenttesla,Attachment,9
9/10/2023,Malicious email campaign; evening,Order and Deposit; xls -> guloader,Attachment,14
9/11/2023,Malicious email campaign; evening,Request for a sample quotation; xls -> agenttesla,Attachment,2
9/12/2023,Malicious email campaign; evening,UAE RFQ CONTRACT: BID SUPPLY 2023 AND SERVICES.; doc -> nanocore,Attachment,3
9/14/2023,Malicious email campaign; evening,Attachements start with inv_|sep_inv; pdf -> wikiloader,Attachment,187
9/14/2023,Malicious email campaign; evening,Purchase order B086651 RE: Requirement_045169; zip -> formbook,Attachment,10
9/15/2023,Malicious email campaign; evening,Re: RE: 33 of 37 RE: RE: RE: FW: AUGUST_ORDER#7504432; rar -> agenttesla,Attachment,4
9/15/2023,Malicious email campaign; morning,New Order; doc -> nanocore,Attachment,3
9/15/2023,Malicious email campaign; morning,Grain pushed barges For Sale; zip -> agenttesla continued to 9/21,Attachment,2
9/15/2023,Malicious email campaign; morning,Fw: OUTSTANDING PAYMENT; xlam -> vbs -> agenttesla,Attachment,4
9/16/2023,Malicious email campaign; morning,"Transfer//TF202309-0103, TF202309-0543; rar -> agenttesla",Attachment,2
9/19/2023,Malicious email campaign; evening,Product lnquiry; zip -> agenttesla,Attachment,4
9/20/2023,Malicious email campaign; morning,Quotation; doc -> nanocore,Attachment,6
9/20/2023,Malicious email campaign; morning,Re: November Order; doc -> agenttesla,Attachment,2
9/20/2023,Malicious email campaign; morning,Confirmation of the beneficiary's name is needed urgently; img -> agenttesla,Attachment,4
9/20/2023,Malicious email campaign; morning,Re:Trade RFQ # 44223 - September pricing and availability; docx -> formbook,Attachment,4
9/20/2023,Malicious email campaign; evening,Re:New Invoice and Packing List For Shipment; r15 -> agenttesla,Attachment,2
9/21/2023,Malicious email campaign; morning,PO - 3780; rar -> agenttesla,Attachment,4
9/23/2023,Malicious email campaign; morning,RE: Revise PI; r15|pif -> agenttesla,Attachment,6
9/25/2023,Malicious email campaign; morning,Price offer <domain>; img -> avemaria,Attachment,4
9/26/2023,Malicious email campaign; morning,RE: USD Payment Confirmation; r00; -> agenttesla,Attachment,2
9/27/2023,Malicious email campaign; morning,Fw:RE: INV-10809A/2023-SDMS // Q10021 IMP13975; xlam -> agenttesla,Attachment,3
9/27/2023,Malicious email campaign; morning,Quotation Request - Sept - SFO/WRN/5; z -> agenttesla,Attachment,2
9/27/2023,Malicious email campaign; morning,Subjects start with Commissione di ; zip -> url -> ifsb,Attachment,5
9/28/2023,Malicious email campaign; morning,Attachment name is P.O 2023-694158501.zip; zip -> bat -> agenttesla,Attachment,2
9/29/2023,Malicious email campaign; morning,"Collective No:10002044U,Due Date:5-10-2023; xlam -> agenttesla",Attachment,2

agenttesla, 00300381185e5af687e6763d45ce0f0fd56c85a5d057e11ab9fac823079ec5eb, mail.sharayugroup.net
agenttesla, 08ee24a724926d938d89f5c7c7650eaf67512a64386dd3d3aea068ba1157c0bf, mail.sofahaus.eu
agenttesla, 099239f804cec77a75d9142dbc302c3c75fb607ec967d9ee38ea1eb21b392a49, ns0.ovh.net
agenttesla, 0998cd32377cfe6c7692fe81f133383175e31720ef3a39b2bba7d63144445215, mail.bernardo-hrvatska.com
agenttesla, 0cdf3f70618d7d304ea20a4319eb6a56173b3e46134aec966f55b20f5505eb94, sh003.webhostbox.net
agenttesla, 0d93db96a7c71d216d6d4cb96abad741ecf89db460d2b32c82049471fa9504da, smtp.hsbv1.nl
agenttesla, 113e16425e010952150f3c1f7ae615602cd4ca30826b0e7518aa058341058a94, mail.amtechprinting.com
agenttesla, 1583539750a0978ddd44e880b98312186bb4cb236635201b209c67703e899e8e, host2069.hostmonster.com
agenttesla, 16312b9a03c84b82f2dfbf4bd286611d112ce2c8bf8534538f88270322d44e34, mail.amtechprinting.com
agenttesla, 1706f846eef66c0ced9bda22b412a48c9f7aa026d13c7173d2687fd8629f6a27, mail.amtechprinting.com
agenttesla, 19e6653f249d7283999ba5be8b4154ccf64693cf228c7f7b4fde670f9fbed711, host2069.hostmonster.com
agenttesla, 1cc38cffe121a64d418fee096032fc4cb1f31bd808a906915efbcfeebee00001, MAIL.elec-qatar.com
agenttesla, 1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65, sh003.webhostbox.net
agenttesla, 27350cfb61909fe70f97f9a558b515fa098257a38ead3fc6e6b89973fd6801c7, mail.amtechprinting.com
agenttesla, 28accd12f705c60eedcd43c660831eea4319520cd4616f069f05f8e4c22f8e0f, https://api.telegram.org/bot6649711568
agenttesla, 2ba5d8e1c77dac550fd1b7d19174670a30da616780dbad4d386f6b9dc2121e9c, host2069.hostmonster.com
agenttesla, 2ce23f32cc6773a978869f6ace53a7ea4a441cab0ebb6ee0063faa57c6fe1625, sh003.webhostbox.net
agenttesla, 2f751e15e2155e4429bc738d59a7c612eb57959ed323d7acea1e36a4d8050738, mail.asiaparadisehotel.com
agenttesla, 34b9610bec1066c97d3b46b0775013054f6ee258c3400f533078f5c7f6e84c92, mail.absbldg.com
agenttesla, 357bf981d0f184aaffdb927ac78f1032874237e9d57d6992841d1c0a348104dd, mail.asiaparadisehotel.com
agenttesla, 379205c0c3c8513734970447108caa4bf563c3af935226b19a9bc60c1b8e9920, MAIL.elec-qatar.com
agenttesla, 37a72a158a2325b4967c6b2a9835fa722b6ca3789316c6120d3f263bfb6c15e7, us2.smtp.mailhostbox.com
agenttesla, 387f52325ca5bcf8e170c7e43b1990bf7d045a95bac44630c41ff0b9a8d29133, mail.sgbumperscar.com
agenttesla, 3b6a3c3e882e95192ca46c020d2651800671e59816eb9aa0cef15cabdbfebfe7, cp5ua.hyperhost.ua
agenttesla, 45cf135407fcc3831ca0d4ccd565fdbcafaf52acf1da81aa7ab739ea5f4e4ccc, mail.amtechprinting.com
agenttesla, 460b19121942383e8139cb13589ce1d31a7b37905ad732e04cf13abc884aa200, mail.algebal.ly
agenttesla, 466e9cff3817e503364feb17b63dede82666d976d13f91d1a1bc8bfb97d1357d, mail.asiaparadisehotel.com
agenttesla, 493b2ded607633e6df0d1b272a717d12adee8171a49b736e006754ca4645567a, sh003.webhostbox.net
agenttesla, 4dbf7f61c77538062aec967e5900ed9092d3a1f46de70ea6f950234e08efc409, mail.absbldg.com
agenttesla, 4e1b1d2b65eb422808f2ef3d8ea6c548310bea1681efd33a9f3a8abce71cfb2a, https://api.telegram.org/bot6649711568
agenttesla, 56e7b2e2165d002ad697d45161f14c37de5b6fa70331e61b8a8e95467ed98a1a, mail.amtechprinting.com
agenttesla, 57484231b68bfb5c3047448ba2020d2f683e22f9d86f31bb9e8a610567cb118c, mail.vpindustries.co.in
agenttesla, 580e9a403ba5923d9efd54ef7f708e0adea2615936cfad7caa1ef38524d50559, mail.amtechprinting.com
agenttesla, 58185723351f7bd9e47b77fe7727f3040677187135e735f9edb943f2ab93ee74, mail.danjaminvestments.co.ke
agenttesla, 5c052358e586f6c13f6b87a424648e4a36629f3998cb90baf6372e1ce37b6920, mail.absbldg.com
agenttesla, 5d200010b1e304c628c669df531476f099b0ca944a1c52e5025f6fc1af16ad1b, mail.asiaparadisehotel.com
agenttesla, 5dbab18a1ba68f3a17fcb9581dc875306a041b5834f27304189f72550a7675d8, mail.asiaparadisehotel.com
agenttesla, 5f348fe41915ae5089634894d32316469efc21b5cc6e85a0f100aa70cd2f3474, MAIL.elec-qatar.com
agenttesla, 603afd5e37a5968f4a17f7ab0e8d9c9cad78bf8b9f5d361f20e6fe424ab40f1d, mail.pomedia.com.lb
agenttesla, 60751e1f86b4b78e592917168a731a30b464a6c52b59118490ac8411905cbcc3, mail.asiaparadisehotel.com
agenttesla, 61f4eee705342f7e875adc36c259693ec40a7682db74ab040b79dd189fffdf5a, premium238.web-hosting.com
agenttesla, 628e749249520c025d931f4e78c48d9fc450362f60f7ad7d31f1e4e58927cfb0, mail.embon.com.ar
agenttesla, 6461077970b9463db60faad97819790772c4b8cf94cc068d6a6524f5b7fc28de, mail.vpindustries.co.in
agenttesla, 64d5f2975203999e9e2411f8772d9f41c6c243bb967f61d81d9f400e2b5ba2b2, webmail.marinabay.al
agenttesla, 68352b1f0fc2fa811c5d26aa398a29ec75e4732a3adfd7d29e4b62292dc56b7a, https://api.telegram.org/bot6192821608
agenttesla, 6ad67f7d5ce2c811b218d9b7224beca8eada82af5111cdaf08492c938c40ce13, mail.asiaparadisehotel.com
agenttesla, 6eddba1588ba6d7183a7940a9974cc188c5473a5087f6853dc40c48df726d598, mail.amtechprinting.com
agenttesla, 725d44e77922332d23018ee4a5a5982ed0856c87d84c86a578c671726776ab48, ns0.ovh.net
agenttesla, 7865bd1702a8060b9f1c48a325560d2b8f947604e000022eb34637348e063ac6, mail.amtechprinting.com
agenttesla, 7c6290e3655029c44efe34d131645a716c892194cbe501514927d90350fee4f7, sh003.webhostbox.net
agenttesla, 7d4f09f032507d246c92aae9fec5391205a4e0082c6b34f0b9b7a8a7fd8704e6, labourcommunitymarket.com/v93r
agenttesla, 80c217259feafed3d4c5d458cffe7f1c8dc8b00823e47538e73b6ff50bbe0585, smtp.hsbv1.nl
agenttesla, 811dbbf4475500604a073378100dd5cc9d85e0af25d17d23d3d27d2bd09f808a, mail.sirisexpress.com
agenttesla, 81e9e8dec49baf997bbc5cce2e2555ec1a05d2a7a39cd1fba8efd6eaabad6060, smtp.yandex.com
agenttesla, 83e202c299d139b909d80f39e81487515d2f21a9a0b6546f42dbd194088e07e7, mail.priezavoti.lv
agenttesla, 8400a919b9cb8b3ba1f8b635a24992fabddd5e162e0735c118a9213dc1f71ba9, MAIL.elec-qatar.com
agenttesla, 8be1494cfcd5e3b5d6f1928b7a25c682317e294ff937f93bdff12d37944dffe8, mail.asiaparadisehotel.com
agenttesla, 8cbd4c3b44b01f2cf5887f3ae447c4a2b72b042a25403095d5b72e900335c116, sh003.webhostbox.net
agenttesla, 91c4358eb1c2c4d38b2c3e930eff281ab6cf22ae0200e4dfa49725fd4657e9f7, sh003.webhostbox.net
agenttesla, 91eced3c8d7c5ae55c5f9efa5cf214ce6a0deacf6dd257613780a20f524cc2b6, mail.asiaparadisehotel.com
agenttesla, 99a8dbacf70de531b3f0fe81ab684aebb845ddf2148942548edbb23f239aa487, mail.unitechautomations.com
agenttesla, 99e3eacb8e3e7a864986921418025df3e67f4e8e0c0c63337a7e58ce7e810ed5, mail.unitechautomations.com
agenttesla, 9edbfdb6303fe8b151d8bcd290efc3bb6f56b3d09c413a22c6d08c742a7818ca, mail.absbldg.com
agenttesla, a188340c788824f0fc1f62fb7e93a40db429f015cd441b17d59c4e8b42794d33, mail.amtechprinting.com
agenttesla, a82af7127b9a6eb4a85f49a8a86ff09e155dfec3fa0d5387726c1c993a4cd947, mail.asiaparadisehotel.com
agenttesla, a9c86947b445df66fe7859c36885e11455743c776a4e9911192e9a355eecde04, mail.awelleh3.top
agenttesla, aac3f57b4e6c0f64c4861436705478fa30fa06d61087847f2bdc1c6a50141038, https://api.telegram.org/bot6427432332
agenttesla, ab335b9636205ee0f2260e18b7c546b6a110015b3a1b759bac656f17ce9e93b2, cp5ua.hyperhost.ua
agenttesla, af4458dcaccca4a71479eccc4601fe13cd6a9be0c30e793cb6efa2f11b72a2fc, cp5ua.hyperhost.ua
agenttesla, b02b2ce7e00fcf9e36c4469bd68e3cd6812ccb39fd24a7beec8aec0f7b9e3287, mail.awelleh3.top
agenttesla, b03290a58e076aeff5df1b1724931df5962ed9ff9ecb7d0d0b1e141072a44346, mail.amtechprinting.com
agenttesla, b1b51101740c9c69a80633b946d8666c30078a9ae856ff54c82042de110db8d5, mail.vpindustries.co.in
agenttesla, b299c276e1ba44a84bc6150b96323929e76db0db1dda3f31867734c3bdb68b06, mail.awelleh3.top
agenttesla, b3a17a454c5f6aa5ec28be35bdf6cbc04cbe7d4cd43833c942fee4fd0a89c621, mail.asiaparadisehotel.com
agenttesla, b5978c0f3d5bb9169425ac3b141e6f197fdff05be6adf8d5753bed0ef86eb285, https://filedownload.info/gate
agenttesla, b6c31cf2b2b77c5f11e59dee5af4b8873dc3f6c0898984d4b060b133f454c302, smtp.hsbv1.nl
agenttesla, b8c01e3ba0b1aef4c9a81100200c770499ac3fe021cf426628574187ba0f9c58, mail.kbakr.com
agenttesla, b9c74c6cf3df328ddeee396c2602a7d93a6fa4f8fc3f1e67e41d91e290592e4e, mail.sirisexpress.com
agenttesla, ba992f3ad1a973b2704a10369220762bb595ee63e249236103727939ae0af019, mail.algebal.ly
agenttesla, bb80534b2020ff8b190121d259f6f0f517b945ef8e29b89554c61956c48efac3, mail.zqamcx.com
agenttesla, bd465091f7787e8290e82c61bda21133c67c391061cfe225b48e1e0030490a3b, mail.amtechprinting.com
agenttesla, bd757613d417aa5fcbca3decb07a44a69e68f74bc35c26bb2f8a3c008343d931, mail.asiaparadisehotel.com
agenttesla, bde356df76eadf9a14d5f5f9a6d9c7ed2677639ffa89b4fdb184c2d4ad7c8d33, mail.gcsho.com
agenttesla, be53b6f5ff15575799a0a929be641c79c173fa0b6de9c95f0ac524c10c1b9c5d, sh003.webhostbox.net
agenttesla, c14cf2077de0f4e6ed3e925c72350a570006f62fcb7d63cbd2c1063afb5a0c26, https://api.telegram.org/bot6642679751
agenttesla, c3e3f75f7fecb2183f4ec45a48091418c708f94658de6c46c29b0316e9aaf693, MAIL.elec-qatar.com
agenttesla, c58c29838ea80655ce6ec3b4041693c62b5f20940a2fd97ede5cd326ff76eb75, MAIL.elec-qatar.com
agenttesla, c74e0ff43aec86ebf78328a3ad0540af860a662f37081e87ccdb393f29e61389, mail.embon.com.ar
agenttesla, cd49b022411c34b834f765d874611467fe327f58a0d3c83cf33d78fb3989e687, sh003.webhostbox.net
agenttesla, cd96e558ce3e2c43977276ade9939859f36d913ee660e2fbd32733585fc9f85e, host2069.hostmonster.com
agenttesla, ce3a3c9f22255146152575aa50fc9f5f1ef3f8c96b9b94cd766301045f846612, mail.sofahaus.eu
agenttesla, ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0, sh003.webhostbox.net
agenttesla, d3074ca50681f450263a6b0d9799b0c0099e0860284b3dfaf2dba85dcecd27cf, mail.amtechprinting.com
agenttesla, d62ab80a981120bc862738658cae6128082845908836dd11bbdd8c9e7995b17a, mail.amtechprinting.com
agenttesla, d7093e702ca2995bfe864781a9476419a95efcd51d29805ce721021da24e4e94, mail.awelleh3.top
agenttesla, d85278c4099b913c69779c4b69a0c85cbb0d7cbe72ae9a324b798a0fd2e02fb7, mail.cyber.net.pk
agenttesla, d8adff43a2a1683b04d784d5f4b7718051f949267cd387bb46f9c89ee8df59e0, cp5ua.hyperhost.ua
agenttesla, d8b5d4fe4499976563bd1d47c252c70c0e0e4aa424ff5b8a082a2aaa6cc39ed7, mail.sirisexpress.com
agenttesla, d9e76dc327aa471101e7f121a68f33eedd1dc4c984f7c354b46b7237c375231e, sh003.webhostbox.net
agenttesla, db2563ec78911e44a7ea7affc6fd4dfa7159b45c52e93b2bb30e9301ef26619d, sh003.webhostbox.net
agenttesla, e01332a4fe4dccce77e4549ec280426162dc150181afb0529bd1fb405daa2bd8, mail.amtechprinting.com
agenttesla, e2b5d276a5778dcf5b0e456c751804a30d063feb2da1467ff01fa736179767ba, mail.amtechprinting.com
agenttesla, e78c8648218f38b73143f2db83c972448cbebf6018e3d74f99622a84f3aff875, sh003.webhostbox.net
agenttesla, e8c5ba9af6c89db0e69234af98c64b49493c93fc8b9314ce2cd7a5d51a897130, host2069.hostmonster.com
agenttesla, e9e7e9651f55ae882e793b6be4d4125a606f52a27f1c399e7896cb84bd76bd8c, mail.asgamaltex.com
agenttesla, ea3ab4eb7852c867c5f4f301e0523d5cf3557c9c73e3fb7f4b0b776cd1425e6b, business62.web-hosting.com
agenttesla, ecf63ee51b700ba7c3628b5bc5696e922268abae30541e601a9045eef56253d6, https://api.telegram.org/bot6055753820
agenttesla, ed5d871ea2afdbdd66a20e04f156f2ecb0fa56e929aaeaa65779e37a13852e20, premium89.web-hosting.com
agenttesla, edecbdb327a945070e5efb7cfce58089e47363e7035d45df6b1f46a0f02a091f, mail.unitechautomations.com
agenttesla, f18feeb5c75c4848990a31437d1b889d1ed0f48524cdecb29077459c7c267d42, evantelamin.top
agenttesla, ffd7fc226ac862e9c9a944e35a73a151e1399595030a3826482e15bc82b5af92, cp5ua.hyperhost.ua
avemaria, 1a0cd2b643a7e0bfe005231bf3bd2d4552d02e9dde1b442ac61a4fb822a3074d, werberyouse.kozow.com:2936
avemaria, 2da628e0bff0b81c2de3c81dc60be0084e23981c3130aea70902784a2874a7a5, sdafsdffssffs.ydns.eu:6703
darkcloud, 14eb5c233e173d7d387b37bcec81fa6f3a6a2485e6f6a174f0e72100872aeb66, mail.lucd.shop
darkcloud, c3dc216c666c28c0205413321e255ea2b1315003bce836986ba64f9acb875fd0, https://api.telegram.org/bot6028253602
darkcloud, e75ec9b02e3f93018f0bac4d8195e6771037b0754e45032c470db2d648fd9bf5, https://api.telegram.org/bot6028253602
darkcloud, e8bc3d6f06f8323de4cf049946c0154b5df20157d613ca5ddeee10d3ad88e43b, https://api.telegram.org/bot6028253602
dbatloader-formbook, 91c7ffd82c5a300a24f5767be8270e6a29467f50db3ac21c80bcba93ce127327, http://www.bbq011.top/nxa0/
formbook, 105fef1d5e42006e1a9da8c9dab3cabc11909658755c931db357ef6743ed15dc, http://www.iran-uk.net/u7cz/
formbook, 37eb8e4c06649578148463c37e23d610284f8b75d986211b97094a178006ef28, http://www.asrworldbridge.com/0knu/
formbook, 3b79e392617523720c040a2e0b39f0ff47593a420ecc9edcb9cd8b9e1d7baca6, http://www.universaldoner.org/v6nn/
formbook, 59e8d4adc87713d6243f1130289d36da2fbd84aca576a0bc1a99d1728f29c756, http://www.holisticpetpals.com/oiwu/
formbook, 75a5d5d46fa6c5178a43eea7c2d4d0bb66dd6879413318416dd70b4ef27faee8, http://www.nasyoeastasia.org/v8zb/
formbook, 7af9cc5b2aade862d245026c370d0d4fd4d375426cd26357abba3ddb4c8a9824, connectioncompass.store/he2a
formbook, 98bce22d33a7e23bf5a32739d01c10443509da758e81b57d26bcc1fcfeb3861f, http://www.thesoul.agency/v8zb/
formbook, b780b2fb9e38bcc285f93125e548c0e7b896fb20a26400f20293c3c6634ebe2d, resenha10.bet/sn26
formbook, be5825c707b2fd0d972ae9d2431561b9215de539846232cff466cb11e20b9d89, browser-privacy.xyz/r65e
guloader-agenttesla, 58ec51aef0c0e6390c5e97f09c79284e27bd551f7078a84f4573405857ee4e4e, mail.embon.com.ar
guloader-azorult, 932a29dcd8b778f2e7c509b3ef9d732632edc266596bea3ed351803dc08cd5af, http://mixz.shop/BL821/index.php
guloader-azorult, a3078491b0ddf39bd477ac540f6466d77d66bd9aa88173726ec5faef1592b5b8, http://hoswell.shop/HS341/index.php
guloader-remcos, 3655ca3d99320c0d1b887ebc753216bec94044603211677d3a5f6331a570a945, 95.214.24.210:2404
kraken, 6706d52fef168e674ebde30f9dd77ac7afcb6645fc84ff9a92b711d3c13f47d2, https://api.telegram.org/bot6414466297
nanocore, 87f26bbe201d7f76fff5ae536708f3f7f18dec22e1b3424923429a54b452b29b, 194.180.48.119:4444
nanocore, b125d23b3416c85b1f35d0d2f6d0f9aee2f1d905af6c79f39a9d6486033a6a45, 194.180.48.119:4444
nanocore, c33376be06134f34b3b1b691f829a795a1031b7352da70a4a95163ee40f81a4a, 194.180.48.119:4444
nanocore, eaba2822cfb7a52fc240d9b6f32cae1f98a51cfbd47ae45bddf17134a464f6cc, 194.180.48.119:4444
nanocore, f35fdd43f200391be9860788b80f9d33b1da585a4d4d702c94c9d2c3a1861324, discojockeylight.duckdns.org:4444
origin, f08c14b22f6c0c8f83842a7f75833ffb0ca88b911b0d82135656085d16985535, https://discord.com/api/webhooks/1154477507333066884/
remcos, 06d9cbc6fc7ceb53c082f82a67c0b1cd4219fec013d52aec2cfd27cf64e5695e, 193.42.32.237:2404
remcos, a89897dcc1e52283b5f169d1dfba7a30df9006550a3fadeee5c58df314310e09, remsmart.hopto.org:55955
wikiloader, deac11f26b14676e7fa98bff505360b8fef4f69183c336f5263bdefcf0bf797c, rgillc.pro
xworm, 7fa4e361cf073d65ccbc49dc937a622965977ef995a0c199a4b4aa5fddd57d17, 138.201.189.141:4444

almustafansons@cyber.net.pk
amany@pomedia.com.lb
arinzelog@saonline.xyz
asia@asiaparadisehotel.com
boni@amtechprinting.com
boys@opttools-tw.com
cclahore@gcsho.com
contact@pmg.com.tn
eowynqu@g-fqroup.com
ft@embon.com.ar
grace@absbldg.com
hs@hsbv1.nl
info@alt-techno.com
info@asgamaltex.com
info@danjaminvestments.co.ke
info@marinabay.al
kdaad@kbakr.com
louis@celisustech.net
MEDICAL@ALGEBAL.LY
mep@ostdubai.com
method1@zqamcx.com
milanosofas.alicante@sofahaus.eu
mohammed.abrar@elec-qatar.com
nigazx11sept@evantelamin.top
obilogs@hulkeng.xyz
pampania@raqiscansystems.com
ptt-mary@sgbumperscar.com
quality@unitechautomations.com
ramesh@sirisexpress.com
sachin.rane@sharayugroup.net
sales03@amtechprinting.com
saleskop3@vpindustries.co.in
sender@mindexit.sbs
serverchi39@awelleh3.top
servereric33@awelleh3.top
serverhar233@awelleh3.top
shin1@asiaparadisehotel.com
tomz@realirtlscm.com
wealthlog@blueyonder.top
	Date,Summary ,Details,Email Payload Type,Users Targeted
	9/2/2023,Malicious email campaign; morning,<email address> You have an incoming invoice; rar -> formbook,Attachment,3
	9/6/2023,Malicious email campaign; evening,Re:Euro Payment Only//Revise Invoice to Euro Currency//Provide Euro Bank Details; z -> agenttesla,Attachment,2
	9/6/2023,Malicious email campaign; morning,New Purchase Order; doc -> nanocore,Attachment,2
	9/6/2023,Malicious email campaign; morning,Pending Invoice payments; zip -> agenttesla,Attachment,6
	9/6/2023,Malicious email campaign; evening,New order#2_W43550970; zip -> agenttesla,Attachment,9
	9/10/2023,Malicious email campaign; evening,Order and Deposit; xls -> guloader,Attachment,14
	9/11/2023,Malicious email campaign; evening,Request for a sample quotation; xls -> agenttesla,Attachment,2
	9/12/2023,Malicious email campaign; evening,UAE RFQ CONTRACT: BID SUPPLY 2023 AND SERVICES.; doc -> nanocore,Attachment,3
	9/14/2023,Malicious email campaign; evening,Attachements start with inv_\|sep_inv; pdf -> wikiloader,Attachment,187
	9/14/2023,Malicious email campaign; evening,Purchase order B086651 RE: Requirement_045169; zip -> formbook,Attachment,10
	9/15/2023,Malicious email campaign; evening,Re: RE: 33 of 37 RE: RE: RE: FW: AUGUST_ORDER#7504432; rar -> agenttesla,Attachment,4
	9/15/2023,Malicious email campaign; morning,New Order; doc -> nanocore,Attachment,3
	9/15/2023,Malicious email campaign; morning,Grain pushed barges For Sale; zip -> agenttesla continued to 9/21,Attachment,2
	9/15/2023,Malicious email campaign; morning,Fw: OUTSTANDING PAYMENT; xlam -> vbs -> agenttesla,Attachment,4
	9/16/2023,Malicious email campaign; morning,"Transfer//TF202309-0103, TF202309-0543; rar -> agenttesla",Attachment,2
	9/19/2023,Malicious email campaign; evening,Product lnquiry; zip -> agenttesla,Attachment,4
	9/20/2023,Malicious email campaign; morning,Quotation; doc -> nanocore,Attachment,6
	9/20/2023,Malicious email campaign; morning,Re: November Order; doc -> agenttesla,Attachment,2
	9/20/2023,Malicious email campaign; morning,Confirmation of the beneficiary's name is needed urgently; img -> agenttesla,Attachment,4
	9/20/2023,Malicious email campaign; morning,Re:Trade RFQ # 44223 - September pricing and availability; docx -> formbook,Attachment,4
	9/20/2023,Malicious email campaign; evening,Re:New Invoice and Packing List For Shipment; r15 -> agenttesla,Attachment,2
	9/21/2023,Malicious email campaign; morning,PO - 3780; rar -> agenttesla,Attachment,4
	9/23/2023,Malicious email campaign; morning,RE: Revise PI; r15\|pif -> agenttesla,Attachment,6
	9/25/2023,Malicious email campaign; morning,Price offer <domain>; img -> avemaria,Attachment,4
	9/26/2023,Malicious email campaign; morning,RE: USD Payment Confirmation; r00; -> agenttesla,Attachment,2
	9/27/2023,Malicious email campaign; morning,Fw:RE: INV-10809A/2023-SDMS // Q10021 IMP13975; xlam -> agenttesla,Attachment,3
	9/27/2023,Malicious email campaign; morning,Quotation Request - Sept - SFO/WRN/5; z -> agenttesla,Attachment,2
	9/27/2023,Malicious email campaign; morning,Subjects start with Commissione di ; zip -> url -> ifsb,Attachment,5
	9/28/2023,Malicious email campaign; morning,Attachment name is P.O 2023-694158501.zip; zip -> bat -> agenttesla,Attachment,2
	9/29/2023,Malicious email campaign; morning,"Collective No:10002044U,Due Date:5-10-2023; xlam -> agenttesla",Attachment,2

	agenttesla, 00300381185e5af687e6763d45ce0f0fd56c85a5d057e11ab9fac823079ec5eb, mail.sharayugroup.net
	agenttesla, 08ee24a724926d938d89f5c7c7650eaf67512a64386dd3d3aea068ba1157c0bf, mail.sofahaus.eu
	agenttesla, 099239f804cec77a75d9142dbc302c3c75fb607ec967d9ee38ea1eb21b392a49, ns0.ovh.net
	agenttesla, 0998cd32377cfe6c7692fe81f133383175e31720ef3a39b2bba7d63144445215, mail.bernardo-hrvatska.com
	agenttesla, 0cdf3f70618d7d304ea20a4319eb6a56173b3e46134aec966f55b20f5505eb94, sh003.webhostbox.net
	agenttesla, 0d93db96a7c71d216d6d4cb96abad741ecf89db460d2b32c82049471fa9504da, smtp.hsbv1.nl
	agenttesla, 113e16425e010952150f3c1f7ae615602cd4ca30826b0e7518aa058341058a94, mail.amtechprinting.com
	agenttesla, 1583539750a0978ddd44e880b98312186bb4cb236635201b209c67703e899e8e, host2069.hostmonster.com
	agenttesla, 16312b9a03c84b82f2dfbf4bd286611d112ce2c8bf8534538f88270322d44e34, mail.amtechprinting.com
	agenttesla, 1706f846eef66c0ced9bda22b412a48c9f7aa026d13c7173d2687fd8629f6a27, mail.amtechprinting.com
	agenttesla, 19e6653f249d7283999ba5be8b4154ccf64693cf228c7f7b4fde670f9fbed711, host2069.hostmonster.com
	agenttesla, 1cc38cffe121a64d418fee096032fc4cb1f31bd808a906915efbcfeebee00001, MAIL.elec-qatar.com
	agenttesla, 1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65, sh003.webhostbox.net
	agenttesla, 27350cfb61909fe70f97f9a558b515fa098257a38ead3fc6e6b89973fd6801c7, mail.amtechprinting.com
	agenttesla, 28accd12f705c60eedcd43c660831eea4319520cd4616f069f05f8e4c22f8e0f, https://api.telegram.org/bot6649711568
	agenttesla, 2ba5d8e1c77dac550fd1b7d19174670a30da616780dbad4d386f6b9dc2121e9c, host2069.hostmonster.com
	agenttesla, 2ce23f32cc6773a978869f6ace53a7ea4a441cab0ebb6ee0063faa57c6fe1625, sh003.webhostbox.net
	agenttesla, 2f751e15e2155e4429bc738d59a7c612eb57959ed323d7acea1e36a4d8050738, mail.asiaparadisehotel.com
	agenttesla, 34b9610bec1066c97d3b46b0775013054f6ee258c3400f533078f5c7f6e84c92, mail.absbldg.com
	agenttesla, 357bf981d0f184aaffdb927ac78f1032874237e9d57d6992841d1c0a348104dd, mail.asiaparadisehotel.com
	agenttesla, 379205c0c3c8513734970447108caa4bf563c3af935226b19a9bc60c1b8e9920, MAIL.elec-qatar.com
	agenttesla, 37a72a158a2325b4967c6b2a9835fa722b6ca3789316c6120d3f263bfb6c15e7, us2.smtp.mailhostbox.com
	agenttesla, 387f52325ca5bcf8e170c7e43b1990bf7d045a95bac44630c41ff0b9a8d29133, mail.sgbumperscar.com
	agenttesla, 3b6a3c3e882e95192ca46c020d2651800671e59816eb9aa0cef15cabdbfebfe7, cp5ua.hyperhost.ua
	agenttesla, 45cf135407fcc3831ca0d4ccd565fdbcafaf52acf1da81aa7ab739ea5f4e4ccc, mail.amtechprinting.com
	agenttesla, 460b19121942383e8139cb13589ce1d31a7b37905ad732e04cf13abc884aa200, mail.algebal.ly
	agenttesla, 466e9cff3817e503364feb17b63dede82666d976d13f91d1a1bc8bfb97d1357d, mail.asiaparadisehotel.com
	agenttesla, 493b2ded607633e6df0d1b272a717d12adee8171a49b736e006754ca4645567a, sh003.webhostbox.net
	agenttesla, 4dbf7f61c77538062aec967e5900ed9092d3a1f46de70ea6f950234e08efc409, mail.absbldg.com
	agenttesla, 4e1b1d2b65eb422808f2ef3d8ea6c548310bea1681efd33a9f3a8abce71cfb2a, https://api.telegram.org/bot6649711568
	agenttesla, 56e7b2e2165d002ad697d45161f14c37de5b6fa70331e61b8a8e95467ed98a1a, mail.amtechprinting.com
	agenttesla, 57484231b68bfb5c3047448ba2020d2f683e22f9d86f31bb9e8a610567cb118c, mail.vpindustries.co.in
	agenttesla, 580e9a403ba5923d9efd54ef7f708e0adea2615936cfad7caa1ef38524d50559, mail.amtechprinting.com
	agenttesla, 58185723351f7bd9e47b77fe7727f3040677187135e735f9edb943f2ab93ee74, mail.danjaminvestments.co.ke
	agenttesla, 5c052358e586f6c13f6b87a424648e4a36629f3998cb90baf6372e1ce37b6920, mail.absbldg.com
	agenttesla, 5d200010b1e304c628c669df531476f099b0ca944a1c52e5025f6fc1af16ad1b, mail.asiaparadisehotel.com
	agenttesla, 5dbab18a1ba68f3a17fcb9581dc875306a041b5834f27304189f72550a7675d8, mail.asiaparadisehotel.com
	agenttesla, 5f348fe41915ae5089634894d32316469efc21b5cc6e85a0f100aa70cd2f3474, MAIL.elec-qatar.com
	agenttesla, 603afd5e37a5968f4a17f7ab0e8d9c9cad78bf8b9f5d361f20e6fe424ab40f1d, mail.pomedia.com.lb
	agenttesla, 60751e1f86b4b78e592917168a731a30b464a6c52b59118490ac8411905cbcc3, mail.asiaparadisehotel.com
	agenttesla, 61f4eee705342f7e875adc36c259693ec40a7682db74ab040b79dd189fffdf5a, premium238.web-hosting.com
	agenttesla, 628e749249520c025d931f4e78c48d9fc450362f60f7ad7d31f1e4e58927cfb0, mail.embon.com.ar
	agenttesla, 6461077970b9463db60faad97819790772c4b8cf94cc068d6a6524f5b7fc28de, mail.vpindustries.co.in
	agenttesla, 64d5f2975203999e9e2411f8772d9f41c6c243bb967f61d81d9f400e2b5ba2b2, webmail.marinabay.al
	agenttesla, 68352b1f0fc2fa811c5d26aa398a29ec75e4732a3adfd7d29e4b62292dc56b7a, https://api.telegram.org/bot6192821608
	agenttesla, 6ad67f7d5ce2c811b218d9b7224beca8eada82af5111cdaf08492c938c40ce13, mail.asiaparadisehotel.com
	agenttesla, 6eddba1588ba6d7183a7940a9974cc188c5473a5087f6853dc40c48df726d598, mail.amtechprinting.com
	agenttesla, 725d44e77922332d23018ee4a5a5982ed0856c87d84c86a578c671726776ab48, ns0.ovh.net
	agenttesla, 7865bd1702a8060b9f1c48a325560d2b8f947604e000022eb34637348e063ac6, mail.amtechprinting.com
	agenttesla, 7c6290e3655029c44efe34d131645a716c892194cbe501514927d90350fee4f7, sh003.webhostbox.net
	agenttesla, 7d4f09f032507d246c92aae9fec5391205a4e0082c6b34f0b9b7a8a7fd8704e6, labourcommunitymarket.com/v93r
	agenttesla, 80c217259feafed3d4c5d458cffe7f1c8dc8b00823e47538e73b6ff50bbe0585, smtp.hsbv1.nl
	agenttesla, 811dbbf4475500604a073378100dd5cc9d85e0af25d17d23d3d27d2bd09f808a, mail.sirisexpress.com
	agenttesla, 81e9e8dec49baf997bbc5cce2e2555ec1a05d2a7a39cd1fba8efd6eaabad6060, smtp.yandex.com
	agenttesla, 83e202c299d139b909d80f39e81487515d2f21a9a0b6546f42dbd194088e07e7, mail.priezavoti.lv
	agenttesla, 8400a919b9cb8b3ba1f8b635a24992fabddd5e162e0735c118a9213dc1f71ba9, MAIL.elec-qatar.com
	agenttesla, 8be1494cfcd5e3b5d6f1928b7a25c682317e294ff937f93bdff12d37944dffe8, mail.asiaparadisehotel.com
	agenttesla, 8cbd4c3b44b01f2cf5887f3ae447c4a2b72b042a25403095d5b72e900335c116, sh003.webhostbox.net
	agenttesla, 91c4358eb1c2c4d38b2c3e930eff281ab6cf22ae0200e4dfa49725fd4657e9f7, sh003.webhostbox.net
	agenttesla, 91eced3c8d7c5ae55c5f9efa5cf214ce6a0deacf6dd257613780a20f524cc2b6, mail.asiaparadisehotel.com
	agenttesla, 99a8dbacf70de531b3f0fe81ab684aebb845ddf2148942548edbb23f239aa487, mail.unitechautomations.com
	agenttesla, 99e3eacb8e3e7a864986921418025df3e67f4e8e0c0c63337a7e58ce7e810ed5, mail.unitechautomations.com
	agenttesla, 9edbfdb6303fe8b151d8bcd290efc3bb6f56b3d09c413a22c6d08c742a7818ca, mail.absbldg.com
	agenttesla, a188340c788824f0fc1f62fb7e93a40db429f015cd441b17d59c4e8b42794d33, mail.amtechprinting.com
	agenttesla, a82af7127b9a6eb4a85f49a8a86ff09e155dfec3fa0d5387726c1c993a4cd947, mail.asiaparadisehotel.com
	agenttesla, a9c86947b445df66fe7859c36885e11455743c776a4e9911192e9a355eecde04, mail.awelleh3.top
	agenttesla, aac3f57b4e6c0f64c4861436705478fa30fa06d61087847f2bdc1c6a50141038, https://api.telegram.org/bot6427432332
	agenttesla, ab335b9636205ee0f2260e18b7c546b6a110015b3a1b759bac656f17ce9e93b2, cp5ua.hyperhost.ua
	agenttesla, af4458dcaccca4a71479eccc4601fe13cd6a9be0c30e793cb6efa2f11b72a2fc, cp5ua.hyperhost.ua
	agenttesla, b02b2ce7e00fcf9e36c4469bd68e3cd6812ccb39fd24a7beec8aec0f7b9e3287, mail.awelleh3.top
	agenttesla, b03290a58e076aeff5df1b1724931df5962ed9ff9ecb7d0d0b1e141072a44346, mail.amtechprinting.com
	agenttesla, b1b51101740c9c69a80633b946d8666c30078a9ae856ff54c82042de110db8d5, mail.vpindustries.co.in
	agenttesla, b299c276e1ba44a84bc6150b96323929e76db0db1dda3f31867734c3bdb68b06, mail.awelleh3.top
	agenttesla, b3a17a454c5f6aa5ec28be35bdf6cbc04cbe7d4cd43833c942fee4fd0a89c621, mail.asiaparadisehotel.com
	agenttesla, b5978c0f3d5bb9169425ac3b141e6f197fdff05be6adf8d5753bed0ef86eb285, https://filedownload.info/gate
	agenttesla, b6c31cf2b2b77c5f11e59dee5af4b8873dc3f6c0898984d4b060b133f454c302, smtp.hsbv1.nl
	agenttesla, b8c01e3ba0b1aef4c9a81100200c770499ac3fe021cf426628574187ba0f9c58, mail.kbakr.com
	agenttesla, b9c74c6cf3df328ddeee396c2602a7d93a6fa4f8fc3f1e67e41d91e290592e4e, mail.sirisexpress.com
	agenttesla, ba992f3ad1a973b2704a10369220762bb595ee63e249236103727939ae0af019, mail.algebal.ly
	agenttesla, bb80534b2020ff8b190121d259f6f0f517b945ef8e29b89554c61956c48efac3, mail.zqamcx.com
	agenttesla, bd465091f7787e8290e82c61bda21133c67c391061cfe225b48e1e0030490a3b, mail.amtechprinting.com
	agenttesla, bd757613d417aa5fcbca3decb07a44a69e68f74bc35c26bb2f8a3c008343d931, mail.asiaparadisehotel.com
	agenttesla, bde356df76eadf9a14d5f5f9a6d9c7ed2677639ffa89b4fdb184c2d4ad7c8d33, mail.gcsho.com
	agenttesla, be53b6f5ff15575799a0a929be641c79c173fa0b6de9c95f0ac524c10c1b9c5d, sh003.webhostbox.net
	agenttesla, c14cf2077de0f4e6ed3e925c72350a570006f62fcb7d63cbd2c1063afb5a0c26, https://api.telegram.org/bot6642679751
	agenttesla, c3e3f75f7fecb2183f4ec45a48091418c708f94658de6c46c29b0316e9aaf693, MAIL.elec-qatar.com
	agenttesla, c58c29838ea80655ce6ec3b4041693c62b5f20940a2fd97ede5cd326ff76eb75, MAIL.elec-qatar.com
	agenttesla, c74e0ff43aec86ebf78328a3ad0540af860a662f37081e87ccdb393f29e61389, mail.embon.com.ar
	agenttesla, cd49b022411c34b834f765d874611467fe327f58a0d3c83cf33d78fb3989e687, sh003.webhostbox.net
	agenttesla, cd96e558ce3e2c43977276ade9939859f36d913ee660e2fbd32733585fc9f85e, host2069.hostmonster.com
	agenttesla, ce3a3c9f22255146152575aa50fc9f5f1ef3f8c96b9b94cd766301045f846612, mail.sofahaus.eu
	agenttesla, ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0, sh003.webhostbox.net
	agenttesla, d3074ca50681f450263a6b0d9799b0c0099e0860284b3dfaf2dba85dcecd27cf, mail.amtechprinting.com
	agenttesla, d62ab80a981120bc862738658cae6128082845908836dd11bbdd8c9e7995b17a, mail.amtechprinting.com
	agenttesla, d7093e702ca2995bfe864781a9476419a95efcd51d29805ce721021da24e4e94, mail.awelleh3.top
	agenttesla, d85278c4099b913c69779c4b69a0c85cbb0d7cbe72ae9a324b798a0fd2e02fb7, mail.cyber.net.pk
	agenttesla, d8adff43a2a1683b04d784d5f4b7718051f949267cd387bb46f9c89ee8df59e0, cp5ua.hyperhost.ua
	agenttesla, d8b5d4fe4499976563bd1d47c252c70c0e0e4aa424ff5b8a082a2aaa6cc39ed7, mail.sirisexpress.com
	agenttesla, d9e76dc327aa471101e7f121a68f33eedd1dc4c984f7c354b46b7237c375231e, sh003.webhostbox.net
	agenttesla, db2563ec78911e44a7ea7affc6fd4dfa7159b45c52e93b2bb30e9301ef26619d, sh003.webhostbox.net
	agenttesla, e01332a4fe4dccce77e4549ec280426162dc150181afb0529bd1fb405daa2bd8, mail.amtechprinting.com
	agenttesla, e2b5d276a5778dcf5b0e456c751804a30d063feb2da1467ff01fa736179767ba, mail.amtechprinting.com
	agenttesla, e78c8648218f38b73143f2db83c972448cbebf6018e3d74f99622a84f3aff875, sh003.webhostbox.net
	agenttesla, e8c5ba9af6c89db0e69234af98c64b49493c93fc8b9314ce2cd7a5d51a897130, host2069.hostmonster.com
	agenttesla, e9e7e9651f55ae882e793b6be4d4125a606f52a27f1c399e7896cb84bd76bd8c, mail.asgamaltex.com
	agenttesla, ea3ab4eb7852c867c5f4f301e0523d5cf3557c9c73e3fb7f4b0b776cd1425e6b, business62.web-hosting.com
	agenttesla, ecf63ee51b700ba7c3628b5bc5696e922268abae30541e601a9045eef56253d6, https://api.telegram.org/bot6055753820
	agenttesla, ed5d871ea2afdbdd66a20e04f156f2ecb0fa56e929aaeaa65779e37a13852e20, premium89.web-hosting.com
	agenttesla, edecbdb327a945070e5efb7cfce58089e47363e7035d45df6b1f46a0f02a091f, mail.unitechautomations.com
	agenttesla, f18feeb5c75c4848990a31437d1b889d1ed0f48524cdecb29077459c7c267d42, evantelamin.top
	agenttesla, ffd7fc226ac862e9c9a944e35a73a151e1399595030a3826482e15bc82b5af92, cp5ua.hyperhost.ua
	avemaria, 1a0cd2b643a7e0bfe005231bf3bd2d4552d02e9dde1b442ac61a4fb822a3074d, werberyouse.kozow.com:2936
	avemaria, 2da628e0bff0b81c2de3c81dc60be0084e23981c3130aea70902784a2874a7a5, sdafsdffssffs.ydns.eu:6703
	darkcloud, 14eb5c233e173d7d387b37bcec81fa6f3a6a2485e6f6a174f0e72100872aeb66, mail.lucd.shop
	darkcloud, c3dc216c666c28c0205413321e255ea2b1315003bce836986ba64f9acb875fd0, https://api.telegram.org/bot6028253602
	darkcloud, e75ec9b02e3f93018f0bac4d8195e6771037b0754e45032c470db2d648fd9bf5, https://api.telegram.org/bot6028253602
	darkcloud, e8bc3d6f06f8323de4cf049946c0154b5df20157d613ca5ddeee10d3ad88e43b, https://api.telegram.org/bot6028253602
	dbatloader-formbook, 91c7ffd82c5a300a24f5767be8270e6a29467f50db3ac21c80bcba93ce127327, http://www.bbq011.top/nxa0/
	formbook, 105fef1d5e42006e1a9da8c9dab3cabc11909658755c931db357ef6743ed15dc, http://www.iran-uk.net/u7cz/
	formbook, 37eb8e4c06649578148463c37e23d610284f8b75d986211b97094a178006ef28, http://www.asrworldbridge.com/0knu/
	formbook, 3b79e392617523720c040a2e0b39f0ff47593a420ecc9edcb9cd8b9e1d7baca6, http://www.universaldoner.org/v6nn/
	formbook, 59e8d4adc87713d6243f1130289d36da2fbd84aca576a0bc1a99d1728f29c756, http://www.holisticpetpals.com/oiwu/
	formbook, 75a5d5d46fa6c5178a43eea7c2d4d0bb66dd6879413318416dd70b4ef27faee8, http://www.nasyoeastasia.org/v8zb/
	formbook, 7af9cc5b2aade862d245026c370d0d4fd4d375426cd26357abba3ddb4c8a9824, connectioncompass.store/he2a
	formbook, 98bce22d33a7e23bf5a32739d01c10443509da758e81b57d26bcc1fcfeb3861f, http://www.thesoul.agency/v8zb/
	formbook, b780b2fb9e38bcc285f93125e548c0e7b896fb20a26400f20293c3c6634ebe2d, resenha10.bet/sn26
	formbook, be5825c707b2fd0d972ae9d2431561b9215de539846232cff466cb11e20b9d89, browser-privacy.xyz/r65e
	guloader-agenttesla, 58ec51aef0c0e6390c5e97f09c79284e27bd551f7078a84f4573405857ee4e4e, mail.embon.com.ar
	guloader-azorult, 932a29dcd8b778f2e7c509b3ef9d732632edc266596bea3ed351803dc08cd5af, http://mixz.shop/BL821/index.php
	guloader-azorult, a3078491b0ddf39bd477ac540f6466d77d66bd9aa88173726ec5faef1592b5b8, http://hoswell.shop/HS341/index.php
	guloader-remcos, 3655ca3d99320c0d1b887ebc753216bec94044603211677d3a5f6331a570a945, 95.214.24.210:2404
	kraken, 6706d52fef168e674ebde30f9dd77ac7afcb6645fc84ff9a92b711d3c13f47d2, https://api.telegram.org/bot6414466297
	nanocore, 87f26bbe201d7f76fff5ae536708f3f7f18dec22e1b3424923429a54b452b29b, 194.180.48.119:4444
	nanocore, b125d23b3416c85b1f35d0d2f6d0f9aee2f1d905af6c79f39a9d6486033a6a45, 194.180.48.119:4444
	nanocore, c33376be06134f34b3b1b691f829a795a1031b7352da70a4a95163ee40f81a4a, 194.180.48.119:4444
	nanocore, eaba2822cfb7a52fc240d9b6f32cae1f98a51cfbd47ae45bddf17134a464f6cc, 194.180.48.119:4444
	nanocore, f35fdd43f200391be9860788b80f9d33b1da585a4d4d702c94c9d2c3a1861324, discojockeylight.duckdns.org:4444
	origin, f08c14b22f6c0c8f83842a7f75833ffb0ca88b911b0d82135656085d16985535, https://discord.com/api/webhooks/1154477507333066884/
	remcos, 06d9cbc6fc7ceb53c082f82a67c0b1cd4219fec013d52aec2cfd27cf64e5695e, 193.42.32.237:2404
	remcos, a89897dcc1e52283b5f169d1dfba7a30df9006550a3fadeee5c58df314310e09, remsmart.hopto.org:55955
	wikiloader, deac11f26b14676e7fa98bff505360b8fef4f69183c336f5263bdefcf0bf797c, rgillc.pro
	xworm, 7fa4e361cf073d65ccbc49dc937a622965977ef995a0c199a4b4aa5fddd57d17, 138.201.189.141:4444

	almustafansons@cyber.net.pk
	amany@pomedia.com.lb
	arinzelog@saonline.xyz
	asia@asiaparadisehotel.com
	boni@amtechprinting.com
	boys@opttools-tw.com
	cclahore@gcsho.com
	contact@pmg.com.tn
	eowynqu@g-fqroup.com
	ft@embon.com.ar
	grace@absbldg.com
	hs@hsbv1.nl
	info@alt-techno.com
	info@asgamaltex.com
	info@danjaminvestments.co.ke
	info@marinabay.al
	kdaad@kbakr.com
	louis@celisustech.net
	MEDICAL@ALGEBAL.LY
	mep@ostdubai.com
	method1@zqamcx.com
	milanosofas.alicante@sofahaus.eu
	mohammed.abrar@elec-qatar.com
	nigazx11sept@evantelamin.top
	obilogs@hulkeng.xyz
	pampania@raqiscansystems.com
	ptt-mary@sgbumperscar.com
	quality@unitechautomations.com
	ramesh@sirisexpress.com
	sachin.rane@sharayugroup.net
	sales03@amtechprinting.com
	saleskop3@vpindustries.co.in
	sender@mindexit.sbs
	serverchi39@awelleh3.top
	servereric33@awelleh3.top
	serverhar233@awelleh3.top
	shin1@asiaparadisehotel.com
	tomz@realirtlscm.com
	wealthlog@blueyonder.top