chthonic.txt

# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.malware-traffic-analysis.net/2018/07/05/index.html

atomary.bit
trumplines.bit

# Reference: https://otx.alienvault.com/pulse/5b4929410ab70516210ffa4c

bookreader.bit
doghunter.bit
amellet.bit
aprode.bit
avaneredge.bit
chicagocity.bit
letit2.bit
pendostan.bit
ponedobla.bit
siteeu.bit
stalinone.bit
trumplines.bit

# Reference: https://twitter.com/malware_traffic/status/1113975722773831680

afroamericanec.bit

# Reference: https://twitter.com/malware_traffic/status/1144726582596186120
# Reference: https://www.malware-traffic-analysis.net/2019/06/28/index.html

prototipussnewssoft.com

# Reference: https://twitter.com/James_inthe_box/status/1159890619310886912
# Reference: https://pastebin.com/E8hup0hu

bbcfackyou.bit
djonimudak.top
peperonyume.top
terretoryfany.site

# Reference: https://blog.talosintelligence.com/2020/01/threat-roundup-0110-0117.html (# Win.Trojan.Chthonic-7516291-1)

imaginyourselfuafe.com
ltdcommprovvetverify.com
mplusworldofficeupdates.com
trokelnopartunofroner.com

# Reference: https://app.any.run/tasks/d0327247-ad7d-4a00-ba18-32e6d6b4102b/

ooqgaphgrgoxfpo.co.uk
hcyjgihgfyxhvlw.co.uk

# Reference: https://app.any.run/tasks/6d84b897-8a16-47ec-99ce-08f44cd7e090/

vexcteqjuxvno.org
csavovvrlwyoo.co.uk
pxlxcmbsfaotm.co.uk
rihskrbocsnrm.net
cagkhhngnqwav.org
ekcfpmnckjvxv.com
aiebgqvvoeaqv.biz
nnptrgksmvwxx.biz
ngjobvjignrkv.ru
pqfjjbjedgqio.info
kqowgvucximkn.co.uk
ldtyjbkwpdxam.info
kjiinkdnvooyr.info
lvnkqpsinjaoa.com
iymnffdryvpbn.ru
mbkrobuxubliy.net
jlrpiksmqqbqv.org
cbycuyscdpwvkxf.co.uk
saooygiqqxymwmp.co.uk
hireocntdmoaveq.ru
tmwqitdorcaevwi.biz
ofeooqiwrfiatlb.org
pecwvbujgobbrmu.info
dawkcjforypwrmh.com
xsejdhdjntmdvpu.biz
xhhqsjdiquqqndx.ru
snyibjqcdshdfof.com
wijilyqvclxpwjm.net
gjtvhrbhodvyvif.net
yrcrkrpvcdfevax.org

# Reference: https://blog.talosintelligence.com/2020/12/threat-roundup-1127-1204.html (# Win.Trojan.Chthonic-9800490-1)

cny06.com
eur06.com
usd04.com

# Reference: https://twitter.com/wwp96/status/1335698871389974528
# Reference: https://app.any.run/tasks/83bb269a-b49d-4746-ade9-8fb8c6e8b7b3/

http://184.164.136.134
aafvypscxsighq.info
aavcubnlbfhwoe.info
accbfwivulipat.ru
aetyelmejnvotu.co.uk
afdrrgsgwpntuf.org
algrawloaiuwyq.info
alimesfqrgpfgr.co.uk
amyggnmwmsniel.net
annbopuaquujahh.co.uk
antgvgdlntnysha.info
attcaogarqbrnn.biz
avofaygxeesmqs.ru
awedmsijsjxlxq.ru
ayjbdcdqsikelo.info
balgopgnsgsxqh.org
bauyuoxgdkdjfk.com
bbemgevoxxivw.biz
bemiftocwayegw.biz
bhhqelikbackcj.ru
bhwqpxapvftrep.ru
blsduhknjpppapo.info
blyicxsygoifcud.com
bmfaafdwouawbd.ru
btpdeqvfmjxbay.org
bxtdlsxptltfcb.net
cdcocdxguygele.org
cdemmngajwokgq.net
cfjfkwlyorihavd.net
clpcivxvpxjxyw.co.uk
cnkfigxtclbsje.info
cryinpbjhpfaqr.co.uk
cvgfilbkhfwtma.net
cvpymgnnbeutfh.net
cxkdollpfcslyn.org
cxmeshvublxmqw.co.uk
cyksokjbeukfgh.org
cyusdrkmlfsvum.org
ddohqobmhmdnawo.biz
dlldmxnbkqghsd.com
dpagrhqqpukoqo.info
dpsuvbavgkctbfn.ru
dupqbjaifewpea.co.uk
dviinoploqxjyy.co.uk
dvlbsgrdoncrye.co.uk
dwolgojqmljiw.org
dwufwvyijpydwg.info
dyflqvvjmcbpck.co.uk
edomwuobwedih.org
eetcoqkkblioaj.com
ejuivwsffwngqe.net
eqgswfkkvljkgq.com
eqqslmlvdvrbyq.com
eqsnpifxutmjua.info
euajonlfgbfjcs.info
euvdbqfvsbijgj.com
exriwidguvftam.biz
faocglqxnaruas.net
fcykrfcqjcwhf.info
fdeewhfjcorpqh.biz
fhitkrijhiwcruh.co.uk
fhoyriquehprffl.info
fhvgaoimncsuqt.biz
fitwekukdqloiep.com
fmlqjebrwuvuil.net
fmnlnautosqdub.com
fpfkvcqpmtufor.ru
fwmunsdwfutla.ru
gdjskbdlcwurycb.biz
gionxdghmklogf.biz
govvdssueawtdf.com
gryjtgifxoaqdk.biz
gtclksqfbvuqqb.org
gvgjqsbkysqiyt.com
gvpcwlltschtek.ru
gyyeoclwodbvad.ru
haimgtlyglwtrg.co.uk
hejlvuvdgjpign.ru
hhbkejilkbdlsp.info
hlpnjslbpfhsfs.co.uk
hntlpmowqodmwj.net
hrbikrmyoxueqd.org
hrkcogrhfqqaeb.org
hthhunhxieaoyd.net
huaefcgstfqucp.co.uk
huqlydoddgwapl.biz
hyexgyyiffkadvo.net
ieinrxfhiclqmq.org
igtqpdgtpcvybp.biz
ijujcbjopfyvvp.co.uk
ilujthukaamswa.biz
imenxdjvrrmnnh.ru
injmhwdqbametl.org
iqlkscarslbvxt.info
iquewwmggtabls.info
isjsvppdjnplh.com
isrjdxuqmrggyh.ru
iugwpeyrpxddpy.com
iywuejvuebdcv.co.uk
jdlnradwnmpyqr.net
jfplxtgsovlspr.org
jkflcxpjbdvtwk.org
jrtqqadsvljkx.biz
jurvyeipqjckv.info
jxhsytjkqywbt.com
jygxbisarorakj.info
kdqjcomgxhuypb.co.uk
keangkbrpyutnw.info
kffmpreasqljtr.com
kmrcfnvqrrerdu.ru
ktcttovfdhvjd.net
kvetkbovjefbx.com
lcblkfhfykeaws.com
lefeetxscwudhq.org
lpwomyctiosbci.com
lxesibbtacuqds.net
mcettsidvtsomv.com
mepwrxjpdtdwtx.co.uk
mhkqlspgakffof.net
mjsodnfdlpeded.co.uk
mnulbjajsopqnk.co.uk
mohqujpmmcyscx.biz
morbdewwqkpfh.net
mrosklcxxrgnv.biz
mscdrlomjobatk.ru
nberaauufmvclkk.net
neqymxsvuckmck.com
nfnmbilccimoeb.info
ngustjkfbnogob.ru
njepjwhvfmqodl.com
nkmcxyjrdsonh.biz
nncyxokmdijex.ru
ntrvsykigbekoo.net
nvbemoyctntiav.com
nvdyqkselloqxg.info
nwceddvvfgyxdn.biz
oalwksyulusxlr.net
oiorrncugpapdh.biz
ojfootniyofnus.com
ojwasjwhpqimh.org
olyajvpxvnrex.ru
oopgcpfhnvplfm.ru
ovtngqdvesffcwn.ru
oygqtahcxrnlsa.org
oyjtgubcwbgqlpk.biz
pdnhejmqnbafaag.biz
plnvbtlrxrdphj.org
pnyyyftndcnvxm.biz
psavvhltdjjaeug.org
ptypmljdvhptllv.org
pxqscqcbyuwmad.info
qglgkkgqfmoqfo.info
qhjyjgdakbsqo.co.uk
qhoufiiyyhlbpc.net
qlqrdqpemfnnya.net
qnprcxtucpsdcoa.info
qqfxccrbuxtoesk.co.uk
rcmfosvritrkgi.ru
rdetckdneddynx.biz
rdjsddoxpatmph.biz
rlutisactedrlvm.com
rnjaapynjobuy.co.uk
rudgsaueoyunayi.org
rujlaqdplxndeha.co.uk
rycweokejowwgu.biz
sebjqbfhkuxich.info
shbuqbddsfdkyb.ru
sheunoudafckcx.net
smtxuamdvmutg.com
stahnffdqjixwh.org
suwucjqdahfigs.ru
suykvfymutxuatx.net
sxhdmncqymavpw.org
tfarqwitfbhpyy.ru
tmykohldmvillhl.com
tpogcvhntahxaeb.ru
tpuflalchcqjgo.co.uk
tqoegqfquwlkum.biz
tqxwmjlnbfvckv.co.uk
tuatkrujcklfrd.co.uk
tyowpbxyhopmnl.org
udoxbfpodqoxcl.ru
uektyhvmjonhwg.co.uk
ugfwyxdtspfeql.info
ulmopbsjejrtls.org
ulvhvagmiahdip.com
umjbgopstmjnjv.info
umsukermrxenkb.info
uopaqllpidjauk.ru
uvyedlsgvwwnjb.net
uyauvjvmrvbpuv.org
vdegykapvxnxy.net
vegudpsbbuksar.com
vhhlpydldypwqb.net
vhqftumlyspore.net
vjnkavyirppjua.co.uk
vodaesjbybgkey.co.uk
vqkwxipufvxsyr.com
wcoetunfivhwy.ru
wcpamiqsypubxf.net
wcwpsvidxmfgcp.biz
wjbkndwtinmtle.com
wjlkcqfoniumqh.com
wljghjumlovsw.info
wmovydcliirqtg.biz
wukxjaqxuhndck.info
xaqxqagahuapxc.biz
xdvxsexoyrfmkl.info
xfgiaiukhhygau.net
xijvqursgcjbdf.ru
xtkrrckfirvrgs.ru
xvxcaymmpwabatn.ru
ybjfobsnyktrxp.biz
ycgabolhdflebr.net
yebdbfsomgdbqu.biz
yekvhxduayqvxk.co.uk
yhtfhtioacwfe.net
yiyymtwwlteetf.org
ykfhivfnndhkub.biz
ytdegqcairuhjom.org
ytukfgvcjoelcc.org
yujarxlbqnrqwb.com

# Reference: https://blog.talosintelligence.com/2021/09/threat-roundup-0827-0903.html (# Win.Trojan.Gamarue-9888629-0)

checkandupprooveupdates.com

# Reference: https://blog.talosintelligence.com/2021/09/threat-roundup-0903-0910.html (# Win.Trojan.Chthonic-9890512-1)

bestjokestories.com
majimoeleanallin30minutes.com
ourpatientsprivatestories.com
mywernevuefinergrbod.com