##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2025-11-20 04:04:30 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS60567
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2025-10-07 14:51:18","http://185.29.9.98/188/22bd335e94be53168%2525252525252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEa8uuh7yy6.hta","offline","malware_download","hta","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-07 14:17:08","http://185.29.9.98/166/2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.txt","offline","malware_download","","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-07 14:17:08","http://185.29.9.98/188/22bd335e94be53168%25252525252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEa8uuh7yy6.hta","offline","malware_download","","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-07 14:17:08","http://185.29.9.98/188/22bd335e94be53168%25252525252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEa8uuh7yy6.txt","offline","malware_download","","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-07 06:20:08","http://185.29.9.91/67/2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEa8uuh7yy6t65thhjj9h97667.hta","offline","malware_download","hta|RAT|RemcosRAT","185.29.9.91","185.29.9.91","60567","SE"
"2025-10-07 06:19:05","http://185.29.9.98/img/KMMI/2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEa8uuh7yy6t65thhjj9hgvo09c.hta","offline","malware_download","hta|RAT|RemcosRAt","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-07 05:56:10","http://185.29.9.98/166/2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.txt","offline","malware_download","ascii|encoded|RAT|RemcosRAT|rev-base64-loader","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-06 11:21:07","http://185.29.9.98/166/2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.hta","offline","malware_download","hta|RAT|RemcosRAT","185.29.9.98","185.29.9.98","60567","SE"
"2025-10-06 11:19:08","http://185.29.9.98/img/KKBC/2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3edc.hta","offline","malware_download","hta|RAT|RemcosRAT","185.29.9.98","185.29.9.98","60567","SE"
"2025-09-29 16:37:24","http://185.29.9.83/66/Images___picture00934005059060606969696996.hta","offline","malware_download","hta|RemcosRAT","185.29.9.83","185.29.9.83","60567","SE"
"2025-09-29 14:21:14","http://185.29.9.83/68/Iamges___picture009000009909080808000800AAAAAA.hta","offline","malware_download","hta|RAT|RemcosRAT","185.29.9.83","185.29.9.83","60567","SE"
"2025-06-27 13:12:13","http://185.29.10.206/OeHNxRoveFug198.bin","offline","malware_download","encrypted|GuLoader","185.29.10.206","185.29.10.206","60567","SE"
"2025-06-27 13:06:07","http://109.248.144.184/112/goodlifewithbestthingsievergetback.hta","offline","malware_download","links-dansarindustries-com","109.248.144.184","109.248.144.184","60567","SE"
"2025-06-17 11:54:06","http://109.248.144.152/pVmTFkcKEdlpVibOXTIK209.bin","offline","malware_download","encrypted|GuLoader","109.248.144.152","109.248.144.152","60567","SE"
"2025-06-17 11:53:07","http://109.248.144.152/fexeXiBgffP67.bin","offline","malware_download","encrypted|GuLoader","109.248.144.152","109.248.144.152","60567","SE"
"2025-06-14 14:08:09","http://109.248.144.233/xampp/cv/wp4096799-lost-in-space-wallpapers.jpg","offline","malware_download","RAT|RemcosRAT","109.248.144.233","109.248.144.233","60567","SE"
"2025-06-13 10:27:04","http://109.248.144.233/xampp/cbn/seenbestthingswithbetterwaytogivebestslips.hta","offline","malware_download","hta|RemcosRAT","109.248.144.233","109.248.144.233","60567","SE"
"2025-06-13 10:26:06","http://109.248.144.233/200/wecreatedbestsolutionsforbetterthingswithgood.hta","offline","malware_download","hta","109.248.144.233","109.248.144.233","60567","SE"
"2025-06-13 10:26:06","http://109.248.144.233/300/bestnetworkingskillneedforbetterperformance.hta","offline","malware_download","hta","109.248.144.233","109.248.144.233","60567","SE"
"2025-06-04 07:02:06","http://109.248.144.230/900/vaadanflowwithgreathappinessforme.vbe","offline","malware_download","ascii|vbe","109.248.144.230","109.248.144.230","60567","SE"
"2025-06-03 14:50:06","http://109.248.144.230/900/remo/evaadanflowwithgreathappinessforme.hta","offline","malware_download","hta|RemcosRAT","109.248.144.230","109.248.144.230","60567","SE"
"2025-05-23 15:51:12","http://185.29.9.60/400/bestintervaltimeforbestsuccestobe.txt","offline","malware_download","RemcosRAT|rev-base64-loader","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-23 15:51:12","http://185.29.9.60/500/greathappinessentiretimeformegetback.txt","offline","malware_download","RemcosRAT|rev-base64-loader","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-23 15:51:03","http://185.29.9.60/400/bestintervaltimeforbestsuccestobe.vbe","offline","malware_download","","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-23 15:51:03","http://185.29.9.60/500/greathappinessentiretimeformegetback.vbe","offline","malware_download","","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-23 14:41:06","http://185.29.9.60/400/kmn/bestintervaltimeforbestsuccestobe.hta","offline","malware_download","hta|RemcosRAT","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-23 14:40:07","http://185.29.9.60/500/wevb/greathappinessentiretimeformegetback.hta","offline","malware_download","hta|RemcosRAT","185.29.9.60","185.29.9.60","60567","SE"
"2025-05-20 11:44:09","http://109.248.144.218/zlbNAgJayvCwpS252.bin","offline","malware_download","encrypted|GuLoader","109.248.144.218","109.248.144.218","60567","SE"
"2025-05-20 07:17:06","http://185.29.9.64/MPWmjVzfhCfRxu8.bin","offline","malware_download","AgentTesla|GuLoader","185.29.9.64","185.29.9.64","60567","SE"
"2025-05-15 18:18:05","http://185.29.9.64/gKihuwGhxt122.bin","offline","malware_download","AgentTesla|encrypted|GuLoader","185.29.9.64","185.29.9.64","60567","SE"
"2025-05-15 13:51:05","http://109.248.144.217/FYrmoTgLzzNAmgBGdwtT96.bin","offline","malware_download","encrypted|GuLoader","109.248.144.217","109.248.144.217","60567","SE"
"2025-05-07 10:37:05","http://185.29.8.59/xampp/cv/new_image.jpg","offline","malware_download","Base64EncodedURL|stego","185.29.8.59","185.29.8.59","60567","SE"
"2025-05-07 08:01:05","http://185.29.8.61/VDoEZMIPuHdKPv133.bin","offline","malware_download","encrypted|GuLoader","185.29.8.61","185.29.8.61","60567","SE"
"2025-04-30 10:25:15","http://109.248.144.201/qDqzT9.bin","offline","malware_download","encrypted|GuLoader","109.248.144.201","109.248.144.201","60567","SE"
"2025-04-30 10:25:06","http://185.29.9.58/RhFbzsPmIH199.bin","offline","malware_download","encrypted|GuLoader","185.29.9.58","185.29.9.58","60567","SE"
"2025-04-29 05:26:06","http://109.248.144.200/GRxflr123.bin","offline","malware_download","encrypted|GuLoader","109.248.144.200","109.248.144.200","60567","SE"
"2025-04-27 23:59:03","http://185.29.10.66/2/lCxelghTDrlSh139.bin","offline","malware_download","","185.29.10.66","185.29.10.66","60567","SE"
"2025-04-24 12:57:06","http://185.29.8.57/BLkyMfnbhSlFop223.bin","offline","malware_download","encrypted|GuLoader","185.29.8.57","185.29.8.57","60567","SE"
"2025-04-15 09:46:05","http://109.248.144.184/xampp/brz/greatnicethingsonhereforgivemebackallpower.gIF","offline","malware_download","","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-15 09:46:05","http://109.248.144.184/xampp/vb/new_image.jpg","offline","malware_download","jpg-base64-loader|opendir","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-15 09:46:03","http://109.248.144.184/xampp/kbco/wesharelovetogethreforgetbestthingsonherefor.txt","offline","malware_download","","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-15 09:45:05","http://109.248.144.184/xampp/kbco/greatdaysreturnbackdontworryforlovestoyou.gif","offline","malware_download","opendir","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-15 09:45:05","http://109.248.144.184/xampp/kbco/wesharelovetogethreforgetbestthingsonherefor.hta","offline","malware_download","hta|opendir","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-14 10:07:04","http://185.29.9.54/urXMLhyJFCopQdyIe114.bin","offline","malware_download","encrypted|GuLoader","185.29.9.54","185.29.9.54","60567","SE"
"2025-04-13 07:14:04","http://185.29.8.53/bDhZf80.bin","offline","malware_download","encrypted|GuLoader","185.29.8.53","185.29.8.53","60567","SE"
"2025-04-13 07:14:04","http://185.29.8.53/oXwOOtJJxxs164.bin","offline","malware_download","encrypted|GuLoader","185.29.8.53","185.29.8.53","60567","SE"
"2025-04-10 19:05:05","http://109.248.144.184/233/ghu/newmethodofgreatnessshootinggoodnewmethodofgreatnes________newmethodofgreatnessshootinggood___newmethodofgreatnessshootinggood.doc","offline","malware_download","doc","109.248.144.184","109.248.144.184","60567","SE"
"2025-04-10 14:40:06","http://185.29.9.54/bQvZIeyC241.bin","offline","malware_download","encrypted|GuLoader","185.29.9.54","185.29.9.54","60567","SE"
"2025-04-10 07:02:06","http://185.29.8.54/GGQTm109.bin","offline","malware_download","encrypted|GuLoader","185.29.8.54","185.29.8.54","60567","SE"
"2025-04-09 09:31:04","http://185.29.8.54/kFDkUwCWQylRJx2.bin","offline","malware_download","AgentTesla|encrypted|GuLoader","185.29.8.54","185.29.8.54","60567","SE"
"2025-04-08 05:41:04","http://185.29.10.66/2/hFJWVnXF66.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.10.66","185.29.10.66","60567","SE"
"2025-04-08 05:40:05","http://185.29.10.66/2/ChBPXZb133.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.10.66","185.29.10.66","60567","SE"
"2025-03-10 08:06:04","http://185.29.8.4/leQrDIBjvs11.bin","offline","malware_download","encrypted|GuLoader","185.29.8.4","185.29.8.4","60567","SE"
"2025-03-10 08:05:09","http://185.29.8.40/dvQUJB31.bin","offline","malware_download","encrypted|GuLoader","185.29.8.40","185.29.8.40","60567","SE"
"2025-03-06 07:03:05","http://109.248.144.159/WHKdPOmRCDbpYkPqnFbx171.bin","offline","malware_download","encrypted|GuLoader","109.248.144.159","109.248.144.159","60567","SE"
"2025-03-04 08:24:04","http://185.29.10.46/eCIYDU35.bin","offline","malware_download","encrypted|GuLoader","185.29.10.46","185.29.10.46","60567","SE"
"2025-03-01 12:57:04","http://185.29.10.46/WWrru4.bin","offline","malware_download","encrypted|GuLoader","185.29.10.46","185.29.10.46","60567","SE"
"2025-03-01 12:57:03","http://185.29.10.46/BDSDHYKdlnZZt28.bin","offline","malware_download","encrypted|GuLoader","185.29.10.46","185.29.10.46","60567","SE"
"2025-02-22 07:08:05","http://185.29.8.32/JFekJvHVFI241.bin","offline","malware_download","encrypted|GuLoader","185.29.8.32","185.29.8.32","60567","SE"
"2025-02-19 06:03:04","http://185.29.8.3/kxFOeEYHVi234.bin","offline","malware_download","encrypted|GuLoader","185.29.8.3","185.29.8.3","60567","SE"
"2025-02-18 19:39:04","http://185.29.10.37/233/ceno/seemebestthingstogivebestgetbackfirthem.hta","offline","malware_download","hta|RemcosRAT","185.29.10.37","185.29.10.37","60567","SE"
"2025-02-18 17:51:04","http://185.29.8.3/qhvTpALYkAPL198.bin","offline","malware_download","encrypted|GuLoader","185.29.8.3","185.29.8.3","60567","SE"
"2025-02-17 18:56:04","http://185.29.8.28/YlGsZEBSdQI249.bin","offline","malware_download","encrypted|GuLoader","185.29.8.28","185.29.8.28","60567","SE"
"2025-02-17 18:56:03","http://185.29.8.28/cydsiTTipdKKWLt225.bin","offline","malware_download","encrypted|GuLoader","185.29.8.28","185.29.8.28","60567","SE"
"2025-02-17 18:56:03","http://185.29.8.28/gBHCAszmYxaEBsPQhLpNpJ203.bin","offline","malware_download","encrypted|GuLoader","185.29.8.28","185.29.8.28","60567","SE"
"2025-02-15 11:34:06","http://185.29.9.26/880/sweetneedeverythingsgoodforme.txt","offline","malware_download","hta","185.29.9.26","185.29.9.26","60567","SE"
"2025-02-13 13:23:04","http://185.29.9.26/880/swes/sweetneedeverythingsggoodformeoodforme.hta","offline","malware_download","hta","185.29.9.26","185.29.9.26","60567","SE"
"2025-02-11 09:24:06","http://185.29.9.26/779/seemybestthingstodowithbest.txt","offline","malware_download","RAT|RemcosRAT|rev-base64-loader","185.29.9.26","185.29.9.26","60567","SE"
"2025-02-11 09:24:04","http://185.29.9.26/779/seemybestthingstodowithbestgoinggood.gIF","offline","malware_download","RAT|RemcosRAT","185.29.9.26","185.29.9.26","60567","SE"
"2025-02-11 08:29:04","http://185.29.9.26/779/sedw/seemybestthingstodowithbestgoinggood.hta","offline","malware_download","hta|RemcosRAT","185.29.9.26","185.29.9.26","60567","SE"
"2025-02-07 13:53:06","http://185.29.10.30/677/greatnicehingsbetterwithgoodthingsfornewwayofbest.txt","offline","malware_download","ascii|encoded|RAT|RemcosRAT|rev-base64-loader","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-07 13:53:04","http://185.29.10.30/677/greatnicehingsbetterwithgoodthingsfornewwayofbest.gIF","offline","malware_download","RAT|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-07 13:21:03","http://185.29.10.30/677/sumi/specialgiftmakewithbestlovershegoodforbestthingsgood.hta","offline","malware_download","hta|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-07 06:34:03","http://185.29.10.30/xampp/koc/ck/nicegirlsheverynicepersonalitygoodbeautifulgirlfrined.hta","offline","malware_download","hta|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 16:38:04","http://185.29.10.117/GYXBjrUUNQgwO252.bin","offline","malware_download","encrypted|GuLoader","185.29.10.117","185.29.10.117","60567","SE"
"2025-02-05 16:38:04","http://185.29.10.117/qQiZKSHWQTSVtZtVWRz56.bin","offline","malware_download","encrypted|GuLoader","185.29.10.117","185.29.10.117","60567","SE"
"2025-02-05 12:25:05","http://185.29.10.30/455/createdbestthingswithbestgunbestofluckgivenmebest.gIF","offline","malware_download","RAT|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 12:05:04","http://185.29.10.30/455/aut/createdbestthingswithbestgunbestofluckgivenmebest.hta","offline","malware_download","hta|RAT|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 10:49:03","http://185.29.10.30/xampp/kkns/seemybestpicturewithentiretime.txt","offline","malware_download","ascii|encoded|RAT|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 10:49:02","http://185.29.10.30/xampp/kkns/sheismybeautifulladywholovesme.gIF","offline","malware_download","RAT|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 10:47:04","http://185.29.10.30/xampp/fbo/sheisagoodgirlwholovesmybestiregood.gIF","offline","malware_download","Formbook","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 08:28:07","http://185.29.10.30/455/seethebestthignsentiretimegivenmebest.txt","offline","malware_download","base64|RemcosRAT|rev|rev-base64-loader","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 08:28:06","http://185.29.10.30/xampp/fbo/seemybestieperformancegood.txt","offline","malware_download","base64|Formbook|rev|rev-base64-loader","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-05 08:28:06","http://185.29.10.30/xampp/koc/verynicegirlfriendshegoodbeautiful.txt","offline","malware_download","base64|RemcosRAT|rev|rev-base64-loader","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-04 19:17:04","http://185.29.10.30/xampp/fbo/fbo/sheisverynicegirllokyetaroudntheglobalgoodnice.hta","offline","malware_download","Formbook|hta","185.29.10.30","185.29.10.30","60567","SE"
"2025-02-04 19:14:03","http://185.29.10.30/xampp/kkns/kkn/shemygoodgirlwholovesmebestthignstobegoodforrmes.hta","offline","malware_download","hta|RemcosRAT","185.29.10.30","185.29.10.30","60567","SE"
"2025-01-26 18:21:04","http://185.29.10.20/aIqXYcJG152.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.10.20","185.29.10.20","60567","SE"
"2025-01-23 10:40:05","http://185.29.8.22/tWpFkMnNPZHx9.bin","offline","malware_download","encrypted|GuLoader","185.29.8.22","185.29.8.22","60567","SE"
"2025-01-20 13:34:07","http://185.29.9.20/XSmSVsNqEw76.bin","offline","malware_download","AgentTesla|encrypted|GuLoader","185.29.9.20","185.29.9.20","60567","SE"
"2024-10-09 23:32:08","http://185.29.10.52/55/AUNCC.txt","offline","malware_download","","185.29.10.52","185.29.10.52","60567","SE"
"2024-09-26 09:34:05","http://185.29.10.52/550/makepicturewithgreatthingstobeonline.tIF","offline","malware_download","RAT|RemcosRAT","185.29.10.52","185.29.10.52","60567","SE"
"2024-09-25 07:15:05","http://185.29.10.52/55/nicegirlfriendwithpictureswithmegirls.tIF","offline","malware_download","RAT|RemcosRAT","185.29.10.52","185.29.10.52","60567","SE"
"2024-09-25 07:14:10","http://185.29.10.52/55/cn/greatthingshappinesshapeeinedaroundtheworldgreatthingswithniceworkersthingsreallygoingnicewithmesheisgreatthingsentirethingstobe______greatthingstobegrea.doc","offline","malware_download","doc|RAT|RemcosRAT","185.29.10.52","185.29.10.52","60567","SE"
"2024-07-30 03:40:06","http://109.248.144.173/460/kno/hopeeverythinggoingwellwithmyfavouratethingstobeunderstandhowitswillbepossibletoseethateverythigngreate_______________seethekiddofgirltounkwo.doc","offline","malware_download","rtf","109.248.144.173","109.248.144.173","60567","SE"
"2024-07-29 13:10:11","http://109.248.144.173/450/hb/heistheheroofnewthingstogetmebackwithentirethingstogetbackunderstarndeverytingbetterwithworkingmodel_______seethepowerofhtwosixse.doc","offline","malware_download","doc|RAT|RemcosRAT","109.248.144.173","109.248.144.173","60567","SE"
"2024-07-29 13:10:10","http://109.248.144.173/450/seemsitsgreattoreleasethedargonpily.gIF","offline","malware_download","RAT|RemcosRAT|vbs","109.248.144.173","109.248.144.173","60567","SE"
"2024-07-25 07:40:07","http://185.29.9.32/81/createdgoodthingswtihmewhilealot.gIF","offline","malware_download","RemcosRAT|vbs","185.29.9.32","185.29.9.32","60567","SE"
"2024-07-25 07:40:06","http://185.29.9.32/81/dg/simplethingsbutsuchagreatthingstobackwithinentirethingstohappenedwithentirethingsbackwith_________simplethingsbacktounderserthings.doc","offline","malware_download","doc|RemcosRAT","185.29.9.32","185.29.9.32","60567","SE"
"2024-07-11 06:56:06","http://109.248.144.141/SyJsdFfKmDaVlh97.bin","offline","malware_download","encrypted|GuLoader","109.248.144.141","109.248.144.141","60567","SE"
"2024-07-09 10:25:14","http://109.248.144.141/kEqdTARUzEgMfI229.bin","offline","malware_download","encrypted|GuLoader","109.248.144.141","109.248.144.141","60567","SE"
"2024-07-09 10:25:11","http://109.248.144.141/CTDrLWaFysZ194.bin","offline","malware_download","encrypted|GuLoader","109.248.144.141","109.248.144.141","60567","SE"
"2024-05-14 06:54:06","http://185.29.9.120/ysmJZrSvph82.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.9.120","185.29.9.120","60567","SE"
"2024-05-10 07:31:10","http://185.29.9.120/gspKkpdP252.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.9.120","185.29.9.120","60567","SE"
"2024-05-09 06:15:15","http://185.29.9.120/QthFnXYOg74.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","185.29.9.120","185.29.9.120","60567","SE"
"2023-07-08 09:56:08","http://185.29.8.42/bagwell/Panel/index.php","offline","malware_download","HTI","185.29.8.42","185.29.8.42","60567","SE"
"2023-06-13 12:22:05","http://109.248.144.244/40/cleanmgr.exe","offline","malware_download","exe","109.248.144.244","109.248.144.244","60567","SE"
"2023-06-13 11:15:06","http://109.248.144.244/re/rs/rsrsrsrsrsrssrsrrsrsrsrsr%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23rsrsrsrsrsrsrsssrsrsrrsrssrsrrsrs.doc","offline","malware_download","rtf","109.248.144.244","109.248.144.244","60567","SE"
"2023-06-13 10:14:09","http://109.248.144.244/re/rererererererererererererererere%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23rerererererererer.doc","offline","malware_download","doc|Loki","109.248.144.244","109.248.144.244","60567","SE"
"2023-02-23 12:00:14","http://185.29.8.109/window/vbc.exe","offline","malware_download","exe|Loki|opendir","185.29.8.109","185.29.8.109","60567","SE"
"2022-09-27 10:04:05","http://185.29.10.41/737290.jpg","offline","malware_download","PowerShell|ps","185.29.10.41","185.29.10.41","60567","SE"
"2022-09-27 10:04:04","http://185.29.10.41/660826186.txt","offline","malware_download","PowerShell|ps","185.29.10.41","185.29.10.41","60567","SE"
"2022-09-27 06:00:06","http://185.29.10.41/6372639.jpg","offline","malware_download","AgentTesla|ascii|PowerShell|ps","185.29.10.41","185.29.10.41","60567","SE"
"2022-09-27 06:00:06","http://185.29.10.41/90538283.txt","offline","malware_download","AgentTesla|ascii|PowerShell|ps","185.29.10.41","185.29.10.41","60567","SE"
"2022-09-22 18:59:03","http://185.29.10.205/kggg/Ykpedt_Jiiispmk.png","offline","malware_download","0d4ce6bd62a6939871782dbf6dc33905","185.29.10.205","185.29.10.205","60567","SE"
"2022-09-22 18:58:03","http://185.29.10.205/collo/Ykpedt.exe","offline","malware_download","0d4ce6bd62a6939871782dbf6dc33905","185.29.10.205","185.29.10.205","60567","SE"
"2022-09-22 10:30:06","http://185.29.10.205/kggg/Nfcdswkc_Xgaxoxkb.jpg","offline","malware_download","encrypted|PureCrypter","185.29.10.205","185.29.10.205","60567","SE"
"2022-09-22 10:29:04","http://185.29.10.205/collo/Nfcdswkc.exe","offline","malware_download","exe|Formbook","185.29.10.205","185.29.10.205","60567","SE"
"2022-09-20 15:59:05","http://185.29.10.205/kggg/Ipsci_Iokyitgy.jpg","offline","malware_download","encrypted|PureCrypter","185.29.10.205","185.29.10.205","60567","SE"
"2022-09-20 15:59:04","http://185.29.10.205/collo/Ipsci.exe","offline","malware_download","exe|Formbook","185.29.10.205","185.29.10.205","60567","SE"
"2022-06-27 09:25:05","http://185.29.10.20/334/vbc.exe","offline","malware_download","32|AgentTesla|exe","185.29.10.20","185.29.10.20","60567","SE"
"2022-06-27 07:07:05","http://185.29.10.20/210/vbc.exe","offline","malware_download","AsyncRAT|exe|opendir|RAT","185.29.10.20","185.29.10.20","60567","SE"
"2022-06-27 07:07:04","http://185.29.10.20/office/documnet.doc","offline","malware_download","AsyncRAT|doc|opendir|RAT","185.29.10.20","185.29.10.20","60567","SE"
"2022-06-20 19:39:04","http://185.29.8.56/okil/oka.exe","offline","malware_download","AgentTesla","185.29.8.56","185.29.8.56","60567","SE"
"2022-06-17 08:56:04","http://185.29.10.125/247/vbc.exe","offline","malware_download","AsyncRAT|exe|opendir","185.29.10.125","185.29.10.125","60567","SE"
"2022-06-16 06:41:04","http://185.29.10.116/450/vbc.exe","offline","malware_download","AsyncRAT|exe|opendir","185.29.10.116","185.29.10.116","60567","SE"
"2022-06-15 18:45:04","http://185.29.10.116/780/vbc.exe","offline","malware_download","AgentTesla|exe|opendir","185.29.10.116","185.29.10.116","60567","SE"
"2022-05-20 05:32:03","http://185.29.8.114/aristo/jdlahdoell.jpg","offline","malware_download","ascii|js|opendir","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-20 05:31:06","http://185.29.8.114/aristo/EncryptedClient.jpg","offline","malware_download","ascii|PowerShell|ps","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-20 05:30:05","http://185.29.8.114/aristo/EncryptedClient8926.jpg","offline","malware_download","ascii|AZORult|opendir|PowerShell|ps","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-20 05:30:04","http://185.29.8.114/aristo/Attack7391.jpg","offline","malware_download","ascii|AZORult|js|opendir","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-20 05:28:04","http://185.29.8.114/ike/EncryptedClient680271.jpg","offline","malware_download","ascii|AveMariaRAT|PowerShell|ps|RAT","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-20 05:28:03","http://185.29.8.114/ike/Attack085382636.jpg","offline","malware_download","ascii|AveMariaRAT|js|RAT","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-19 18:51:06","https://185.29.8.61/0077/vbc.exe","offline","malware_download","32|exe|Loki","185.29.8.61","185.29.8.61","60567","SE"
"2022-05-19 13:51:05","http://185.29.8.61/0077/vbc.exe","offline","malware_download","exe|Loki|opendir","185.29.8.61","185.29.8.61","60567","SE"
"2022-05-19 13:51:05","http://185.29.9.47/1960/vbc.exe","offline","malware_download","exe|Loki|opendir","185.29.9.47","185.29.9.47","60567","SE"
"2022-05-19 11:26:04","http://185.29.8.114/rothchild/EncryptedClient.jpg","offline","malware_download","ascii|encoded|opendir|PowerShell|ps","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-19 11:25:04","http://185.29.8.114/rothchild/EncryptedClient2718.jpg","offline","malware_download","ascii|AZORult|opendir|PowerShell|ps","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-19 11:25:04","http://185.29.8.114/rothchild/hdgsjgdjk.jpg","offline","malware_download","ascii|js|opendir","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-19 11:24:04","http://185.29.8.114/rothchild/Attack09271972.jpg","offline","malware_download","ascii|AZORult|js|opendir","185.29.8.114","185.29.8.114","60567","SE"
"2022-05-16 12:46:04","http://185.29.9.123/1314/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.123","185.29.9.123","60567","SE"
"2022-05-16 12:40:05","http://185.29.10.43/0770/vbc.exe","offline","malware_download","exe|Loki|opendir","185.29.10.43","185.29.10.43","60567","SE"
"2022-05-12 18:25:05","http://185.29.9.30/6969/vbc.exe","offline","malware_download","exe|Loki|opendir","185.29.9.30","185.29.9.30","60567","SE"
"2022-05-12 07:08:05","http://185.29.9.29/1510/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.29","185.29.9.29","60567","SE"
"2022-05-10 10:32:04","http://185.29.9.18/2992/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.18","185.29.9.18","60567","SE"
"2022-04-27 07:35:06","http://185.29.9.18/9991/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.18","185.29.9.18","60567","SE"
"2022-04-26 06:41:04","http://185.29.9.17/1717/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.17","185.29.9.17","60567","SE"
"2022-04-14 10:53:07","http://185.29.10.122/8701/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.10.122","185.29.10.122","60567","SE"
"2022-04-14 09:25:04","http://185.29.10.25/6001/document_shpd.doc","offline","malware_download","doc|formbook|loader","185.29.10.25","185.29.10.25","60567","SE"
"2022-04-14 09:20:04","http://185.29.10.25/6001/vbc.exe","offline","malware_download","formbook","185.29.10.25","185.29.10.25","60567","SE"
"2022-04-12 12:09:05","http://185.29.10.116/01r0/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.10.116","185.29.10.116","60567","SE"
"2022-04-11 07:55:05","http://109.248.144.159/3331/vbc.exe","offline","malware_download","exe|Formbook|opendir","109.248.144.159","109.248.144.159","60567","SE"
"2022-04-04 21:03:06","http://109.248.144.135/511/vbc.exe","offline","malware_download","exe|Formbook","109.248.144.135","109.248.144.135","60567","SE"
"2022-04-04 15:49:04","http://185.29.9.117/0001/vbc.exe","offline","malware_download","exe|Formbook|opendir","185.29.9.117","185.29.9.117","60567","SE"
"2022-04-04 15:30:06","http://109.248.144.135/005/vbc.exe","offline","malware_download","exe|Loki|opendir","109.248.144.135","109.248.144.135","60567","SE"
"2022-04-04 01:07:04","http://109.248.144.135/006/vbc.exe","offline","malware_download","exe|Formbook","109.248.144.135","109.248.144.135","60567","SE"
"2022-04-01 13:55:05","http://109.248.144.158/2279/vbc.exe","offline","malware_download","exe|Loki|opendir","109.248.144.158","109.248.144.158","60567","SE"
"2021-10-17 06:44:06","http://185.29.8.159/mspaint_x86.exe","offline","malware_download","exe|ShikataGaNai","185.29.8.159","185.29.8.159","60567","SE"
"2021-10-17 06:44:04","http://185.29.8.159/Update-KB4524143.ps1","offline","malware_download","","185.29.8.159","185.29.8.159","60567","SE"
"2020-12-10 10:17:04","http://185.29.9.11/op.bin","offline","malware_download","encrypted|GuLoader","185.29.9.11","185.29.9.11","60567","SE"
"2020-12-07 06:07:04","http://185.29.9.11/RW.bin","offline","malware_download","encrypted|GuLoader","185.29.9.11","185.29.9.11","60567","SE"
"2020-12-04 07:49:04","http://185.29.8.108/johnnyn.bin","offline","malware_download","encrypted|GuLoader|NetWire","185.29.8.108","185.29.8.108","60567","SE"
"2020-12-02 08:22:03","http://185.29.8.108/sv.exe","offline","malware_download","exe|GuLoader","185.29.8.108","185.29.8.108","60567","SE"
"2020-12-02 08:21:05","http://185.29.8.108/RF.bin","offline","malware_download","encrypted|GuLoader|NetWire","185.29.8.108","185.29.8.108","60567","SE"
"2020-12-02 08:21:03","http://185.29.8.108/mg.bin","offline","malware_download","encrypted|GuLoader","185.29.8.108","185.29.8.108","60567","SE"
"2020-12-02 07:55:04","http://185.29.8.108/ch.exe","offline","malware_download","exe|NetWire","185.29.8.108","185.29.8.108","60567","SE"
"2020-11-27 07:03:14","http://185.29.10.103/oxiba.exe","offline","malware_download","AgentTesla|exe","185.29.10.103","185.29.10.103","60567","SE"
"2020-02-24 07:17:07","http://office-archives.duckdns.org/cloud/clearance.rtf","offline","malware_download","RTF","office-archives.duckdns.org","185.29.10.45","60567","SE"
"2020-02-06 14:42:22","http://109.248.144.187/bin.exe","offline","malware_download","kpot","109.248.144.187","109.248.144.187","60567","SE"
"2020-01-16 15:16:03","http://185.29.10.14/latssnvp.bin","offline","malware_download","encrypted","185.29.10.14","185.29.10.14","60567","SE"
"2020-01-16 14:46:10","httP://185.29.10.14/welcomes.exe","offline","malware_download","exe","185.29.10.14","185.29.10.14","60567","SE"
"2018-08-21 04:47:06","http://185.29.8.212/europ/akid.exe","offline","malware_download","exe|Trickbot","185.29.8.212","185.29.8.212","60567","SE"
"2018-08-21 04:47:06","http://185.29.8.212/move/mane.exe","offline","malware_download","exe|Trickbot","185.29.8.212","185.29.8.212","60567","SE"
# of entries: 172