# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: blackrock, mbot, mysterybot

# Reference: https://twitter.com/bl4ckh0l3z/status/1286221012464480262
# Reference: https://www.virustotal.com/gui/file/32d2071ea8b7d815ab3455da2770b01901cef3fc26b9912f725a0a7de2f7d150/detection

http://62.109.31.11

# Reference: https://twitter.com/yongyecc/status/1293216141569953792

black-privat.ru

# Reference: https://twitter.com/fr3dhk/status/1301225880677564417

217.8.117.93:8080
http://217.8.117.93

# Reference: https://www.virustotal.com/gui/file/1e9ede2577268947b6e45b57eb9fb984ee41894d88572279cb0d69b26634dd26/detection

176.121.14.151:8082
http://176.121.14.151

# Reference: https://twitter.com/B0rys_Grishenko/status/1328385458674470912

pekano.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1350118707557785602
# Reference: https://twitter.com/malwrhunterteam/status/1354082027923005451
# Reference: https://www.virustotal.com/gui/file/481daa5725528d9d3f40bc9d015345e80243962c16ff1cee63739031183f347a/detection
# Reference: https://www.virustotal.com/gui/file/19566dfad2a2ec22e2ac3281618528f3675405b849656f6de845fb3a5cf1e486/detection

http://91.214.124.196
covitaly-19.club

# Reference: https://twitter.com/LukasStefanko/status/1357641346010533888
# Reference: https://www.virustotal.com/gui/ip-address/91.214.124.200/relations

autolycus.ug
veles.ug

# APK

/iPKO.apk
