# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.symantec.com/security_response/earthlink_writeup.jsp?docid=2018-013106-5656-99

bleepingcomputer.bit
nomoreransom.bit
esetnod32.bit
emsisoft.bit
gandcrab.bit

# Reference: https://cert.gov.ua/news/43

cryptsen7fo43rr6.onion
cryptsen7fo43rr6.onion.to
cryptsen7fo43rr6.onion.cab

# Reference: https://twitter.com/avman1995/status/1041733448560521217

zsr7pln56d2ovr85.com
alldonemostbe.space/auth/login

# Reference: https://www.fortinet.com/blog/threat-research/gandcrab-honor-among-thieves.html

politiaromana.bit
malwarehunterteam.bit
gdcb.bit
gandcrab.bit
nomoreransom.coin
nomoreransom.bit

# Reference: https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-version-2-released-with-new-crab-extension-and-other-changes/

gdcbmuveqjsli57x.onion
gdcbmuveqjsli57x.hiddenservice.net
gdcbmuveqjsli57x.onion.guide
gdcbmuveqjsli57x.onion.rip
gdcbmuveqjsli57x.onion.plus
gdcbmuveqjsli57x.onion.to

# Reference: https://twitter.com/blackorbird/status/1108200419543535616

kakaocorp.link/includes/assets/zufufu.gif

# Reference: https://blog.talosintelligence.com/2019/03/threat-roundup-0315-0322.html (Win.Ransomware.Gandcrab-6900355-0)

carder.bit
ransomware.bit
wowservers.ru

# Reference: https://twitter.com/CryptoInsane/status/1119253648549269505

gandcr4cponzb2it.onion
