# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: raccoon, mohazo

# Reference: https://twitter.com/ViriBack/status/1120072762305990663
# Reference: https://twitter.com/James_inthe_box/status/1119282322895855618

http://176.223.143.5
http://80.88.90.110
raccoon-gate.site
raccoon-storage.site

# Reference: https://twitter.com/x42x5a/status/1124062134378409992

http://94.177.213.34

# Reference: https://twitter.com/James_inthe_box/status/1151583038087655424

http://35.246.139.134

# Reference: https://twitter.com/nao_sec/status/1175779553211379720

http://34.90.238.61

# Reference: https://twitter.com/P3pperP0tts/status/1176118878553956354

http://35.228.240.181

# Reference: https://app.any.run/tasks/80750e99-21d6-4fd4-b245-0312fa3908ab/

http://35.228.79.212

# Reference: https://www.cybereason.com/blog/hunting-raccoon-stealer-the-new-masked-bandit-on-the-block
# Reference: https://www.cybereason.com/hubfs/Indicators%20of%20Compromise/Raccoon%20-%20Indicators%20of%20Compromise.pdf
# Reference: https://otx.alienvault.com/pulse/5db2e20e8d6c8e510174fa05

adsymbol.com
advertserv25.world
advexmail2d.world
aegohaohuoruitiiee.top
aegohaohuoruitiiek.su
aegohaohuoruitiiel.cc
aegohaohuoruitiieo.io
aegohaohuoruitiiep.co
aeifaeifhutuhuhuse.top
aeifaeifhutuhuhusk.su
aeifaeifhutuhuhusl.cc
aeifaeifhutuhuhuso.io
aeifaeifhutuhuhusp.co
aeoughaoheguaoehde.top
aeoughaoheguaoehdk.su
aeoughaoheguaoehdl.cc
aeoughaoheguaoehdo.io
aeoughaoheguaoehdp.co
aeufuaehfiuehfuhfe.top
aeufuaehfiuehfuhfk.su
aeufuaehfiuehfuhfl.cc
aeufuaehfiuehfuhfo.io
aeufuaehfiuehfuhfp.co
afaeigaifgsgrhhafe.top
afaeigaifgsgrhhafk.su
afaeigaifgsgrhhafl.cc
afaeigaifgsgrhhafo.io
afaeigaifgsgrhhafp.co
afaigaeigieufuifie.top
afaigaeigieufuifik.su
afaigaeigieufuifil.cc
afaigaeigieufuifio.io
afaigaeigieufuifip.co
avgcommunity.info
beahero4u.com
befaheaiudeuhughge.top
befaheaiudeuhughgk.su
befaheaiudeuhughgl.cc
befaheaiudeuhughgo.io
befaheaiudeuhughgp.co
bfagzzezgaegzgfaie.top
bfagzzezgaegzgfaik.su
bfagzzezgaegzgfail.cc
bfagzzezgaegzgfaio.io
bfagzzezgaegzgfaip.co
bitcoinwinery.com
daedagheauehfuuhfe.top
daedagheauehfuuhfk.su
daedagheauehfuuhfl.cc
daedagheauehfuuhfo.io
daedagheauehfuuhfp.co
dualup.top
eaeuafhuaegfugeude.top
eaeuafhuaegfugeudk.su
eaeuafhuaegfugeudl.cc
eaeuafhuaegfugeudo.io
eaeuafhuaegfugeudp.co
eclk.club
eguaheoghouughahse.top
eguaheoghouughahsk.su
eguaheoghouughahsl.cc
eguaheoghouughahso.io
eguaheoghouughahsp.co
fingers1.ddns.net
firstbankhome.com
fusaazor6.icu
gaghpaheiafhjefije.top
gaghpaheiafhjefijk.su
gaghpaheiafhjefijl.cc
gaghpaheiafhjefijo.io
gaghpaheiafhjefijp.co
gaoehuoaoefhuhfuge.top
gaoehuoaoefhuhfugk.su
gaoehuoaoefhuhfugl.cc
gaoehuoaoefhuhfugo.io
gaoehuoaoefhuhfugp.co
gaoheeuofhefefhute.top
gaoheeuofhefefhutk.su
gaoheeuofhefefhutl.cc
gaoheeuofhefefhuto.io
gaoheeuofhefefhutp.co
gaohrhurhuhruhfsde.top
gaohrhurhuhruhfsdk.su
gaohrhurhuhruhfsdl.cc
gaohrhurhuhruhfsdo.io
gaohrhurhuhruhfsdp.co
gaouehaehfoaeajrse.top
gaouehaehfoaeajrsk.su
gaouehaehfoaeajrsl.cc
gaouehaehfoaeajrso.io
gaouehaehfoaeajrsp.co
geauhouefheuutiiie.top
geauhouefheuutiiik.su
geauhouefheuutiiil.cc
geauhouefheuutiiio.io
geauhouefheuutiiip.co
getmycash4u.com
ggcleaner.space
huaeokaefoaeguaehe.top
huaeokaefoaeguaehk.su
huaeokaefoaeguaehl.cc
huaeokaefoaeguaeho.io
huaeokaefoaeguaehp.co
lookmodeusa.com
luckymonkey.net.in
mailserv85m.world
mybetterdl.com
nothinginterestinghere.com
paarlprecision.com
rubthemoneybear.xyz
rzhsudhugugfugugse.top
rzhsudhugugfugugsk.su
rzhsudhugugfugugsl.cc
rzhsudhugugfugugso.io
rzhsudhugugfugugsp.co
thaus.top
urusurofhsorhfuuhk.su
urusurofhsorhfuuhl.cc
urusurofhsorhfuuho.io
urusurofhsorhfuuhp.co
usd.odysseus-nua.com
  
# Generic trails

/file_handler/file.php
/gate/log.php
