# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.microsoft.com/security/portal/threat/Encyclopedia/Entry.aspx?Name=Win32/Gamarue#tab=2

cityhotlove.com
clothesshopuppy.com
conpastcon.com
freefinder.me
grrrff24213402.com
grrrff2452.com
iurhjfnmflsdf.com
lanamakotrue.com
mgrsdfkprogerg.com
pastinwest.com
puppyclothesshop1.net
puppyclothesshop2.net

# Reference: http://www.malware-traffic-analysis.net/2015/10/20/index.html

motherbeing-news.com
mindfucktoys.com
mommycums.com
musictocheer.com
731pro.pw

# Reference: https://www.aldeid.com/wiki/48e29119b03641499492336695c29ffd

suckmycocklameavindustry.in
xdqzpbcgrvkj.ru
anam0rph.su
orzdwjtvmein.in
ygiudewsqhct.in
bdcrqgonzmwuehky.nl
somicrososoft.ru

# Reference: https://www.virustotal.com/en/domain/amnsreiuojy.ru/information/
# Reference: https://www.threatcrowd.org/malware.php?md5=8bdfb5f4f2292eba9a2e68eb1aab7840

amnsreiuojy.ru
morphed.ru
deltaheavy.ru

# Reference: https://www.virustotal.com/en/domain/bdcrqgonzmwuehky.nl/information/

bdcrqgonzmwuehky.nl

# Reference: https://malwr.com/analysis/YzA2MGY4MDE2NzNmNDEyMmE3OWEzZDQ5ZTEwMjZmZTc/

amnsreiuojy.ru
xdqzpbcgrvkj.ru
anam0rph.su
orzdwjtvmein.in
ygiudewsqhct.in
bdcrqgonzmwuehky.nl
somicrososoft.ru
rentipod.ru
lnx-games.su

# Reference: https://blog.avast.com/andromeda-under-the-microscope

atomictrivia.ru
designthefuture.ru
gvaq70s7he.ru
getuptateserv.eu
disorderstatus.ru
ac6ruv8t.ru

# Reference: https://blog.avast.com/andromeda-under-the-microscope

differentia.ru

# Reference: https://www.threatcrowd.org/malware.php?md5=3044af3a89e9e110889ba9d0923f25f3

xxtyr0xg4w.ru
76236osm1.ru
sxxtyr0xg4w.ru

# Reference: https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/W32~Gamarue-AT/detailed-analysis.aspx

hzmksreiuojy.biz
hzmksreiuojy.com
hzmksreiuojy.in
hzmksreiuojy.nl
hzmksreiuojy.ru

# Reference: https://blog.talosintelligence.com/2018/09/threat-roundup-0907-0914.html (Win.Dropper.Gamarue-6682684-0)

awele.duckdns.org
dogged.cf
genpral.top
pafindo.me
safemann.tk
siyaghasourccing.com
www.greenfleld.com
www.slompbit.xyz

# Reference: https://www.virustotal.com/en/file/198dbf18747c4592fcce43c3b1c45f9706f9c3fb781e8ac9f23f0c2418caa5ca/analysis/

differentia.ru
atomictrivia.ru
39slxu3bw.ru
76236osm1.ru

# Reference: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Backdoor:Win32/Gamarue
# Reference: https://totalhash.cymru.com/analysis/?ab3a71d5d1dfec699ccfbaddbb4ac5a2ad34c617
# Reference: https://totalhash.cymru.com/analysis/?767f89633e21fc96b430a17058b572720eaf7228

faumoussuperstars.ru
a.nas.ru
b.nas.ru
c.nas.ru
powerrembo.ru
lunaizemlya.ru
/intro/data.php

# Reference: https://www.threatcrowd.org/malware.php?md5=3845acda05dcf834d9f2237fd3db40b4

sbws3v7zh.ru