# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://unit42.paloaltonetworks.com/goodbye-mworm-hello-nworm-trickbot-updates-propagation-module/
# Reference: https://otx.alienvault.com/pulse/5ed0273a3fe965e82b4ced5f

http://23.95.227.159

# Reference: https://www.secuinfra.com/en/techtalk/n-w0rm-analysis-part-1/
# Reference: https://www.secuinfra.com/en/techtalk/n-w0rm-analysis-part-2/
# Reference: https://www.virustotal.com/gui/file/afc5a5a1a18f3e65bffa6e3d4e68ed90c102a942156db77ef570c4e8d1394dbc/detection

http://15.188.246.78
37.120.141.190:9031
nyanmoney02.duckdns.org

# Reference: https://github.com/pr0xylife/nworm/blob/main/nworm_10.02.2022.txt
# Reference: https://www.virustotal.com/gui/file/c2b9521387ba444a21025af33ad1097fc6217bde590dace1c2e73cc0076b50b3/detection

37.120.141.190:5057
moneyhope81.duckdns.org
nyanmoj.duckdns.org

# Generic

/RILSXDKOPJHN.TXT
/SSSSSSHSJSJSA.txt
