| domain | smartthingsfind-samsung[.]com | 1 | 2026-05-14 |
| domain | support-lcloud[.]xyz | 1 | 2026-05-14 |
| domain | view-location[.]app | 1 | 2026-05-14 |
| domain | viewlocation[.]app | 1 | 2026-05-14 |
| url | hxxps://direct[.]lc[.]chat/19252309 | 1 | 2026-05-14 |
| url | hxxps://t[.]co/56TlmnQA0M | 1 | 2026-05-14 |
| url | hxxps://direct[.]lc[.]chat/19449368 | 1 | 2026-05-14 |
| url | hxxps://api[.]telegram[.]org/bot8584408242:AAGFK13zX70Zq_ezkA-BUAr-x6Jn308BlmI/sendMessage | 1 | 2026-05-14 |
| url | hxxps://www[.]paypalrefund[.]workers[.]dev/en?utm_medium=chat&utm_campaign=link-shared-in-chat&utm_source=livechat.com&utm_content=direct.lc.chat | 1 | 2026-05-14 |
| url | hxxps://www[.]govnet[.]co[.]za/?redirect=hxxps://direct.lc.chat/19449368 | 1 | 2026-05-14 |
| url | hxxp://44[.]252[.]85[.]168:666/files/kube.py | 1 | 2026-05-14 |
| filename | /etc/systemd/system/teampcp-react.service | 1 | 2026-05-14 |
| url | hxxp://67[.]217[.]57[.]240:666/files/proxy.sh | 1 | 2026-05-14 |
| domain | amazonaws[.]com | 1 | 2026-05-14 |
| domain | amazonses[.]com | 1 | 2026-05-14 |
| domain | smtp-out[.]us-west-2[.]amazonses[.]com | 1 | 2026-05-14 |
| domain | us-west-2[.]amazonses[.]com | 1 | 2026-05-14 |
| sha256 | 43d09743a69c9afa7156bf4e2bf7423b3d5f5ad7d54c4c3fb8a698d526778057 | 1 | 2026-05-14 |
| sha256 | 7929355856A2A85D48F95D230CD74FBB5AD554BED49E73B1800136C4BCCCD1A8 | 1 | 2026-05-14 |
| sha256 | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | 1 | 2026-05-14 |
| sha256 | 948C8C69FE02EDA9231AEBFA5C626335307058AC74A5C3C40B346179A1BFC982 | 1 | 2026-05-14 |
| ip | 208[.]95[.]112[.]1 | 1 | 2026-05-14 |
| md5 | 78ba57f4a164bedc26204296ea09bb8f | 1 | 2026-05-14 |
| md5 | a7eeead9c868d9944ed1c1f113328f32 | 1 | 2026-05-14 |
| email | americas2[@]horeca-bucuresti[.]ro | 1 | 2026-05-14 |
| sha1 | b50b3800b17ad7ad5c4483c0b6b24d1d151a9d10 | 1 | 2026-05-14 |
| sha256 | cd83f5ceb2d014badfa991106a9d37a6aeab9043d60d796ad0f16d36cdfa5703 | 1 | 2026-05-14 |
| domain | email[.]elrif[.]com | 1 | 2026-05-14 |
| domain | email[.]v[.]todotramitesperu[.]com[.]elgartizocon[.]ro | 1 | 2026-05-14 |
| domain | ftp[.]horeca-bucuresti[.]ro | 1 | 2026-05-14 |
| url | hxxp://ip-api[.]com/line/?fields=hosting | 1 | 2026-05-14 |
| ip | 89[.]39[.]83[.]184 | 1 | 2026-05-14 |
| ip | 91[.]92[.]41[.]64 | 1 | 2026-05-14 |
| url | hxxps://online-app[.]giaodienweb[.]info/?auth2=51X7L2rZzAHNNFWSEYhCPdWVh7pMJ | 1 | 2026-05-14 |
| url | hxxps://onlineapp[.]ooraikaoo[.]info/?auth2=8rf22euu-2nxkebabDjjILlzldhQq2Pz | 1 | 2026-05-14 |
| domain | online-app[.]giaodienweb[.]info | 1 | 2026-05-14 |
| domain | onlineapp[.]ooraikaoo[.]info | 1 | 2026-05-14 |
| sha256 | 039e659ade3aa8ee7758c11fdb8fbfffd2491920046d638413cea2042f6d584c | 1 | 2026-05-14 |
| ip | 45[.]153[.]34[.]132 | 1 | 2026-05-14 |
| filename | C:\Windows\System32\komari-agent.exe | 1 | 2026-05-14 |
| registry_key | HKLM\System\CurrentControlSet\Services\WindowsUpdateService | 1 | 2026-05-14 |
| url | hxxps://raw[.]githubusercontent[.]com/komari-monitor/komari-agent/refs/heads/main/install[.]ps1 | 1 | 2026-05-14 |
| domain | raw[.]githubusercontent[.]com | 1 | 2026-05-14 |
| md5 | 678fb1a87af525c33ba2492552d5c0e2 | 1 | 2026-05-14 |
| md5 | 9ca5f93a732f404bbb2cee848f5bbda0 | 1 | 2026-05-14 |
| md5 | 08160acf08fccecde7b34090db18b321 | 1 | 2026-05-14 |
| md5 | c42ae004badddd3017adadbdd1421e00 | 1 | 2026-05-14 |
| url | hxxps://www[.]yespp[.]co[.]kr/common/include/code/out.php | 1 | 2026-05-14 |
| md5 | 52f1ff082e981cbdfd1f045c6021c63f | 1 | 2026-05-14 |
| md5 | 58ac2f65e335922be3f60e57099dc8a3 | 1 | 2026-05-14 |
