| domain | ip-api[.]com | 1 | 2026-05-14 |
| filename | /tmp/.X752e2ca1-lock | 1 | 2026-05-14 |
| filename | /var/log/.ICE-unix | 1 | 2026-05-14 |
| filename | /var/log/.Test-unix | 1 | 2026-05-14 |
| sha256 | ea1d34b21b739a6bbf89b3f7e67978005cf7f3eda612cefc7eac1c8ead7c5545 | 1 | 2026-05-14 |
| domain | account-bitpanda[.]com | 1 | 2026-05-14 |
| url | hxxps://account-bitpanda[.]com/home45314541.php | 1 | 2026-05-14 |
| url | hxxps://ldgroups[.]com/Adobe/windows.php | 1 | 2026-05-14 |
| domain | jtprotherapy[.]screenconnect[.]com | 1 | 2026-05-14 |
| ip | 104[.]21[.]36[.]162 | 1 | 2026-05-14 |
| ip | 15[.]204[.]108[.]149 | 1 | 2026-05-14 |
| ip | 51[.]89[.]242[.]48 | 1 | 2026-05-14 |
| filename | Adobe_Reader_Access_Document.vbs | 1 | 2026-05-14 |
| domain | antibotsl[.]com | 1 | 2026-05-14 |
| domain | cassablscq[.]com[.]es | 1 | 2026-05-14 |
| domain | greenmedicare[.]com | 1 | 2026-05-14 |
| url | hxxp://51[.]89[.]242[.]48:8040/Bin/ScreenConnect[.]ClientSetup[.]msi | 1 | 2026-05-14 |
| url | hxxps://vmail[.]app[.]n8n[.]cloud/webhook/43976209-fb4f-47ce-9c4a-8ee44127dfa0 | 1 | 2026-05-14 |
| domain | ldgroups[.]com | 1 | 2026-05-14 |
| domain | rakteam[.]xyz | 1 | 2026-05-14 |
| domain | sewingshedstroud[.]co[.]uk | 1 | 2026-05-14 |
| domain | tekkocaeli[.]com | 1 | 2026-05-14 |
| domain | vmail[.]app[.]n8n[.]cloud | 1 | 2026-05-14 |
| url | hxxps://antibotsl[.]com/adobe/microsoft_store.php | 1 | 2026-05-14 |
| filename | %ProgramData%\USOShared\Logs\User\adwapi64.dll | 1 | 2026-05-14 |
| domain | gateway[.]filen[.]io | 1 | 2026-05-14 |
| domain | wellnesscaremed[[.]]com | 1 | 2026-05-14 |
| registry_key | HKCU\Software\Classes\CLSID\{68DDBB56-9D1D-4FD9-89C5-C0DA2A625392}\InProcServer32 | 1 | 2026-05-14 |
| sha256 | aefd15e3c395edd16ede7685c6e97ca0350a702ee7c8585274b457166e86b1fa | 1 | 2026-05-14 |
| ip | 146[.]19[.]24[.]131 | 1 | 2026-05-14 |
| domain | cloudcraftshub[.]com | 1 | 2026-05-14 |
| filename | g2m.dll | 1 | 2026-05-14 |
| url | hxxps://cloudcraftshub[.]com/api | 1 | 2026-05-14 |
| mutex | Rmc-11YWBZ | 1 | 2026-05-14 |
| sha256 | A73B7CE334B0F346CF5161E65173DFF08B6BB313969A5F603A3344F9644C4DE6 | 1 | 2026-05-14 |
| sha256 | 7c5adef4b5aee7a4aa6e795a86f8b7d601618c3bc003f1326ca57d03ec7d6524 | 1 | 2026-05-14 |
| domain | logkit-tau[.]vercel[.]app | 1 | 2026-05-14 |
| domain | apachelicense[.]vercel[.]app | 1 | 2026-05-14 |
| md5 | e9b9d86a22f9795d42632650a78d57df | 1 | 2026-05-14 |
| domain | astrabytesyncs[[.]]com | 1 | 2026-05-14 |
| domain | publicshare[[.]]org | 1 | 2026-05-14 |
| url | hxxps://vscode-ext-git[[.]]vercel[[.]]app | 1 | 2026-05-14 |
| domain | talentacq[[.]]pro | 1 | 2026-05-14 |
| domain | authdocspro[.]com | 1 | 2026-05-14 |
| url | /api/device/status/ | 1 | 2026-05-14 |
| domain | adobe-lar[.]denise-chxhistory-com-s-account[.]workers[.]dev | 1 | 2026-05-14 |
| url | /api/device/start | 1 | 2026-05-14 |
| domain | celebratieinvitiee[.]de | 1 | 2026-05-14 |
| domain | getceptionparty[.]de | 1 | 2026-05-14 |
| sha256 | 4c373bc25cb71dbb75e73b61dff25aa184be8d327053a97202a6b1a5919cab0d | 1 | 2026-05-14 |
