| domain | 22evxpggnkyrxpluewqsrv5j4jtde6hut2peq3w4 | 1 | 2026-05-13 |
| domain | cloudapi[.]stream | 1 | 2026-05-13 |
| url | mines.cloudapi.stream/auth_google | 1 | 2026-05-13 |
| url | tg.cloudapi.stream/save_session.php | 1 | 2026-05-13 |
| domain | top[.]rodeo | 1 | 2026-05-13 |
| domain | 0x666[[.]]info | 1 | 2026-05-13 |
| domain | panel[.]fefea22134[[.]]net | 1 | 2026-05-13 |
| sha256 | 6c8efbcef3af80a574cb2aa2224c145bb2e37c2f3d3f091571708288ceb22d5f | 1 | 2026-05-13 |
| email | [email protected] | 1 | 2026-05-13 |
| email | [email protected] | 1 | 2026-05-13 |
| url | hxxps://wbnoebe[.]com/login | 1 | 2026-05-13 |
| url | hxxps://wbnoebe[.]com?token | 1 | 2026-05-13 |
| domain | wbnoebe[.]com | 1 | 2026-05-13 |
| sha256 | 4fff28eecc0ab6303e4948df77671009dda5b93ed3d1cead527b02d1317426bc | 1 | 2026-05-13 |
| domain | alafrica[.]xyz | 1 | 2026-05-13 |
| domain | alperu[.]top | 1 | 2026-05-13 |
| domain | vnwd[.]top | 1 | 2026-05-13 |
| domain | bluegraintours[.]com | 1 | 2026-05-13 |
| url | hxxp://bluegraintours[.]com | 1 | 2026-05-13 |
| url | outlook.office.com/bluegraintours | 1 | 2026-05-13 |
| sha256 | 11ae897d79548b6b44da75f7ab335a0585f47886ce22b371f6d340968dbed9ae | 1 | 2026-05-13 |
| sha256 | 6aba7b5a9b4f7ad4203f26f3fb539911369aeef502d43af23aa3646d91280ad9 | 1 | 2026-05-13 |
| sha256 | aa7a3e8b59b5495f6eebc19f0654b93bb01fd2fa2932458179a8ae85fb4b8ec1 | 1 | 2026-05-13 |
| domain | D[.]2fcc7078[.]digimg[.]store | 1 | 2026-05-13 |
| email | [email protected] | 1 | 2026-05-13 |
| domain | teams[.]onlivemeet[.]com | 1 | 2026-05-13 |
| sha256 | 05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69 | 1 | 2026-05-13 |
| url | hxxp://104[.]238[.]149[[.]]198:12349/BVN0VEdddye5odDFVR | 1 | 2026-05-13 |
| sha256 | ad67031e2ca68764fe1a7d6632c02b02a299d59efb920710011a9a2ccf4399b7 | 1 | 2026-05-13 |
| sha256 | bde50a42efc079edde1a314243ad339db2d42e343fbbcd39117803b0f5960355 | 1 | 2026-05-13 |
| url | hxxp://nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd[.]onion | 1 | 2026-05-13 |
| email | [email protected] | 1 | 2026-05-13 |
| email | prince1990905@gmail[.]com | 1 | 2026-05-13 |
| url | hXXps://global[[.]]sharedfilescorps[[.]]com/interior/ | 1 | 2026-05-13 |
| url | hXXps://ministry[[.]]sharedfilescorps[[.]]com/interior/$ | 1 | 2026-05-13 |
| url | hXXps://wivoumea[[.]]ru/HAPApOYtrk1Zzs0iF6mk@/$ | 1 | 2026-05-13 |
| filename | C:\Program Files (x86)\SmarterTools\SmarterMail\Service\wwwroot\result.txt | 1 | 2026-05-13 |
| registry_key | UseLogonCredential | 1 | 2026-05-13 |
| sha256 | 92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a | 4 | 2026-05-13 |
| sha256 | 617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101 | 2 | 2026-05-13 |
| sha256 | e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09 | 4 | 2026-05-13 |
| filename | C:\inetpub\wwwroot\ShareFile\StorageCenter\documentum | 1 | 2026-05-13 |
| url | /ConfigService/Admin.aspx | 1 | 2026-05-13 |
| url | /ConfigService/api/StroageZoneConfig | 1 | 2026-05-13 |
| url | /upload.aspx | 1 | 2026-05-13 |
| filename | /Library/Caches/com.apple.act.mond | 2 | 2026-05-13 |
| url | hxxp://sfrclak[[.]]com:8000/6202033 | 4 | 2026-05-13 |
| filename | %PROGRAMDATA%\\wt.exe | 1 | 2026-05-13 |
| url | hxxps://transparenciapresupuestaria[.]hermosillo[.]gob[.]mx | 1 | 2026-05-13 |
| sha256 | e303ac1a9b378382830fc6a0b5a9574eca415d14d9282e2b4aced725db9cfbc5 | 1 | 2026-05-13 |
