forked from stamparm/maltrail
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathandroid_vultur.txt
88 lines (67 loc) · 2.55 KB
/
android_vultur.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission
# Aliases: brunhilda
# Reference: https://twitter.com/ThreatFabric/status/1407753903907745793
# Reference: https://www.virustotal.com/gui/file/f8b07a53a2ff84bdaa79e19d3382723b785d5d2fa755af2893b5a91e7cf79748/detection
365fitness365.xyz
# Reference: https://www.threatfabric.com/blogs/vultur-v-for-vnc.html
# Reference: https://www.virustotal.com/gui/file/7ca6989ccfb0ad0571aef7b263125410a5037976f41e17ee7c022097f827bd74/detection
protectionguardapp.club
# Reference: https://threatfabric.com/blogs/deceive-the-heavens-to-cross-the-sea.html
# Reference: https://www.virustotal.com/gui/file/a3bd136f14cc38d6647020b2632bc35f21fc643c0d3741caaf92f48df0fc6997/detection
# Reference: https://www.virustotal.com/gui/file/d3dc4e22611ed20d700b6dd292ffddbc595c42453f18879f2ae4693a4d4d925a/detection
flowdivison.club
multifuctionscanner.club
readyqrscanner.club
# Reference: https://twitter.com/_icebre4ker_/status/1485651238175846400
# Reference: https://www.virustotal.com/gui/ip-address/185.177.92.247/relations
privacyandroidapp.club
# Reference: https://tracker.viriback.com/dump.php (2022-07-11)
http://142.11.241.69:5050
http://154.53.33.203:5050
http://192.3.15.113:5050
http://199.247.17.103:5050
http://20.120.111.184:5050
http://34.69.68.209:5050
http://52.188.26.40:5050
http://77.232.42.129:5050
http://94.140.112.43:5050
# Reference: https://tria.ge/220718-mryqesbeh9
193.142.59.123:5050
# Reference: https://tria.ge/220718-mrrl4scfep
129.146.33.174:5050
xmarv.ddns.net
# Reference: https://blog.fox-it.com/2024/03/28/android-malware-vultur-expands-its-wingspan/
cloudmiracle.store
safetyfactor.online
flandria171.appspot.com
newyan-1e09d.appspot.com
mcafee.053105.com
mcafee.092877.com
mcafee.353934.com
mcafee.581574.com
mcafee.582342.com
mcafee.582630.com
mcafee.593942.com
mcafee.784503.com
mcafee.908713.com
mcafee.930204.com
mcafee.960232.com
# Reference: https://www.embeeresearch.io/infrastructure-tracking-locating-vultur-domains-with-passive-dns/
mcafee.0041-3413.com
mcafee.0041-5413.com
mcafee.0051-4413.com
mcafee.0051-6413.com
mcafee.357-46.com
mcafee.486-31.com
mcafee.5541-23.com
mcafee.5814-1601.com
mcafee.5832-1414.com
mcafee.5832-3414.com
mcafee.654-87.com
mcafee.789-20.com
mcafee.798-13.com
# Reference: https://twitter.com/malwrhunterteam/status/1789424091092419024
# Reference: https://www.virustotal.com/gui/file/ef04b246dc6c3ba619994cdbbaf010833d7164ef98d3ef04696223a132b793da/detection
brustworth.online
protect.641869.com