# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.reverse.it/sample/1cf6c857a111c9ff2f9cbe92ad80a1c3905d9830fc308f387f4b82533dee284a?environmentId=100

ltc001.zapto.org

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-AT/detailed-analysis.aspx

mercury.yori.pl
photobeat.su
star.helli.pl
stargate.parad.su
uranus.kei.su

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-DC/detailed-analysis.aspx

alonealmost.net
aloneborrow.net
alonechance.net
alonedelight.net
aloneelectricity.net
alonemeeting.net
aloneorderly.net
alonereason.net
alonetrain.net
alonetwenty.net
aloneunderstood.net
alonevalue.net
amountalmost.net
amountborrow.net
amountchance.net
amountmeeting.net
amountorderly.net
amountreason.net
amounttwenty.net
amountunderstood.net
amountvalue.net
chiefalmost.net
chiefborrow.net
chiefchance.net
chiefdelight.net
chiefelectricity.net
chiefmeeting.net
chieforderly.net
chiefreason.net
chieftrain.net
chieftwenty.net
chiefunderstood.net
chiefvalue.net
classalmost.net
classchance.net
classmeeting.net
classorderly.net
classreason.net
classtwenty.net
classunderstood.net
classvalue.net
collegealmost.net
collegeborrow.net
collegechance.net
collegedelight.net
collegeelectricity.net
collegemeeting.net
collegeorderly.net
collegereason.net
collegetrain.net
collegetwenty.net
collegeunderstood.net
collegevalue.net
historyalmost.net
historyborrow.net
historychance.net
historydelight.net
historyelectricity.net
historymeeting.net
historyorderly.net
historyreason.net
historytrain.net
historytwenty.net
historyunderstood.net
historyvalue.net
middlealmost.net
middleborrow.net
middlechance.net
middledelight.net
middleelectricity.net
middlemeeting.net
middleorderly.net
middlereason.net
middletrain.net
middletwenty.net
middleunderstood.net
middlevalue.net
morningalmost.net
morningborrow.net
morningchance.net
morningdelight.net
morningelectricity.net
morningmeeting.net
morningorderly.net
morningreason.net
morningtrain.net
morningtwenty.net
morningunderstood.net
morningvalue.net
oftenalmost.net
oftenborrow.net
oftenchance.net
oftendelight.net
oftenelectricity.net
oftenmeeting.net
oftenorderly.net
oftenreason.net
oftentrain.net
oftentwenty.net
oftenunderstood.net
oftenvalue.net
presentborrow.net
presentchance.net
presentdelight.net
presentelectricity.net
presentmeeting.net
presenttrain.net
presenttwenty.net
presentunderstood.net
presentvalue.net
ratheralmost.net
ratherborrow.net
ratherchance.net
ratherdelight.net
ratherelectricity.net
rathermeeting.net
ratherorderly.net
ratherreason.net
rathertrain.net
rathertwenty.net
ratherunderstood.net
rathervalue.net
strangealmost.net
strangeborrow.net
strangechance.net
strangedelight.net
strangeelectricity.net
strangemeeting.net
strangeorderly.net
strangereason.net
strangetrain.net
strangetwenty.net
strangeunderstood.net
strangevalue.net
thickalmost.net
thickchance.net
thickmeeting.net
thickorderly.net
thickreason.net
thicktwenty.net
thickunderstood.net
thickvalue.net
thinkborrow.net
thinkchance.net
thinkdelight.net
thinkelectricity.net
thinkmeeting.net
thinktrain.net
thinktwenty.net
thinkunderstood.net
twelvealmost.net
twelveborrow.net
twelvechance.net
twelvedelight.net
twelveelectricity.net
twelvemeeting.net
twelveorderly.net
twelvereason.net
twelvetrain.net
twelvetwenty.net
twelveunderstood.net
twelvevalue.net
weatheralmost.net
weatherchance.net
weathermeeting.net
weatherorderly.net
weatherreason.net
weathertwenty.net
weatherunderstood.net
weathervalue.net

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-AR/detailed-analysis.aspx

rima-spanish.com

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-DP/detailed-analysis.aspx

brokenbelieve.net
brokenbranch.net
brokenhonor.net
brokenlaughter.net
brokenneither.net
brokenquarter.net
brokenreceive.net
brokensystem.net
brokentrust.net
buildingbelieve.net
buildingbranch.net
buildingconsider.net
buildingfancy.net
buildingfriend.net
buildinghonor.net
buildinglaughter.net
buildingneither.net
buildingquarter.net
buildingreceive.net
buildingsystem.net
buildingtrust.net
desirebelieve.net
desirebranch.net
desirehonor.net
desireneither.net
desirequarter.net
desirereceive.net
desiresystem.net
desiretrust.net
doctorbelieve.net
doctorbranch.net
doctorconsider.net
doctorfancy.net
doctorfriend.net
doctorhonor.net
doctorlaughter.net
doctorneither.net
doctorquarter.net
doctorreceive.net
doctorsystem.net
doctortrust.net
doublebelieve.net
doublebranch.net
doubleconsider.net
doublefancy.net
doublefriend.net
doublehonor.net
doublelaughter.net
doubleneither.net
doublequarter.net
doublereceive.net
doublesystem.net
doubletrust.net
eveningbelieve.net
eveningbranch.net
eveningconsider.net
eveningfancy.net
eveningfriend.net
eveninghonor.net
eveninglaughter.net
eveningneither.net
eveningquarter.net
eveningreceive.net
eveningsystem.net
eveningtrust.net
fellowbelieve.net
fellowbranch.net
fellowconsider.net
fellowfancy.net
fellowfriend.net
fellowhonor.net
fellowlaughter.net
fellowneither.net
fellowquarter.net
fellowreceive.net
fellowsystem.net
fellowtrust.net
mightbelieve.net
mightbranch.net
mightconsider.net
mightfancy.net
mightfriend.net
mighthonor.net
mightlaughter.net
mightneither.net
mightquarter.net
mightreceive.net
mightsystem.net
mighttrust.net
movementbelieve.net
movementbranch.net
movementconsider.net
movementfancy.net
movementfriend.net
movementhonor.net
movementlaughter.net
movementneither.net
movementquarter.net
movementreceive.net
movementsystem.net
movementtrust.net
outsidebelieve.net
outsidebranch.net
outsideconsider.net
outsidefancy.net
outsidefriend.net
outsidehonor.net
outsidelaughter.net
outsideneither.net
outsidequarter.net
outsidereceive.net
outsidesystem.net
outsidetrust.net
preparebelieve.net
preparebranch.net
preparehonor.net
prepareneither.net
preparequarter.net
preparereceive.net
preparesystem.net
preparetrust.net
prettybelieve.net
prettybranch.net
prettyconsider.net
prettyfancy.net
prettyfriend.net
prettyhonor.net
prettylaughter.net
prettyneither.net
prettyquarter.net
prettyreceive.net
prettysystem.net
prettytrust.net
resultbelieve.net
resultbranch.net
resulthonor.net
resultneither.net
resultquarter.net
resultreceive.net
resultsystem.net
resulttrust.net
stillbelieve.net
stillbranch.net
stillhonor.net
stillneither.net
stillnorth.net
stillquarter.net
stillreceive.net
stillsystem.net
stilltrust.net
storebelieve.net
storebranch.net
storeconsider.net
storefancy.net
storefriend.net
storehonor.net
storelaughter.net
storeneither.net
storequarter.net
storereceive.net
storesystem.net
storetrust.net
strengthbelieve.net
strengthbranch.net
strengthhonor.net
strengthneither.net
strengthquarter.net
strengthreceive.net
strengthsystem.net
strengthtrust.net

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-X/detailed-analysis.aspx

http://antoniovazza.com/images/adm/class-wp-admin.php
http://bandersnatchpress.com/adm/class-wp-admin.php
http://bokiwoni.wincom.co.kr/etc/img/class-wp-admin.php
http://fotobees.net/cgi-sys/suspendedpage.cgi
http://fotobees.net/wp-includes/class-wp-admin.php
http://holidayradio.gr/adm/class-wp-admin.php


# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Kazy-CA/detailed-analysis.aspx

snow.schultziesschnauzers.org