# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.symantec.com/connect/blogs/snapshot-virut-botnet-after-interruption

irc.zief.pl
proxim.ircgalaxy.pl

# Reference: https://www.threatcrowd.org/malware.php?md5=88cca88f77be6b6902b4f8d606446eb3

intelaids.su
intelblog.su
intelcore.su
intelprog.su
intelservice.su
intelsecurity.su

# Reference: http://www.symantec.com/security_response/writeup.jsp?docid=2007-041117-2623-99&tabid=2

core.ircgalaxy.pl
irc.zief.pl
proxim.ircgalaxy.pl
ru.brans.pl

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2007-090613-5727-99&tabid=2

ircd.zief.pl

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2006-051402-1930-99&tabid=2

proxima.ircgalaxy.pl

# Reference: https://www.cert.pl/PDF/Report_Virut_EN.pdf

adle.pl
asyr.pl
bigex.pl
brans.pl
brenz.pl
bton.pl
cfan.pl
chura.pl
civix.pl
deps.pl
ghura.pl
hamb.pl
idet.pl
idon.pl
ircgalaxy.pl
ixie.pl
kerit.pl
kilme.pl
konter.pl
lifty.pl
lometr.pl
meiu.pl
merts.pl
mugu.pl
nels.pl
nigim.pl
play9.pl
ragom.pl
remp.pl
runk.pl
sizi.pl
strup.pl
sums.pl
tanz.pl
timid.pl
traum.pl
trenz.pl
tymis.pl
valc.pl
vand.pl
vasli.pl
volke.pl
zief.pl
alr4.ru
bzug.ru
cawt.ru
dbut.ru
gbil.ru
gimbs.ru
ijol.ru
ilgo.ru
ilopa.ru
ketor.ru
libis.ru
lilke.ru
limag.ru
linug.ru
migtu.ru
mlix.ru
pamip.ru
qnx1.ru
rdek.ru
rolmi.ru
rulm.ru
tasb.ru
tim4.ru
varpo.ru
vilq.ru
wict.ru
xalx.ru
xdix.ru
xitr.ru
ziten.ru
amfib.at
difti.at
egab.at
ikepa.at
kamfo.at
maft.at
mampo.at
sox4.at
adxhost.org

# Reference: http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=143054

ntkrnlpa.info

# Reference: https://twitter.com/SickPeaSec/status/1138513877090443264

ilo.brenz.pl

# Reference: https://twitter.com/DGAFeedAlerts/status/1153095094565842944

brysla.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154907180233056258

ibubyx.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154907190513283073

oynist.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154907175120191490

hddrjx.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154907204627161093

xyeric.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154907165666291713

crmiso.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1154544537437532161

cbucke.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1157806141042319360

qshykj.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1158168534238859265

laridk.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1159618126587281413

ubelix.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1159618122338504704

caijhi.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1160705405200322565

dnfrun.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1160705433105051654

yclhjc.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1160705424716423169

lsadwd.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1162517405249220614

lebocq.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1163966747923402752

audiit.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1165416573823344641

anguka.com
deatur.com
dztwsd.com
frufee.com
okayam.com
oxamit.com
sycfaw.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1167591059628707840

autazo.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1168315439962873856

adevee.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1168677698610323456

djruen.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1175200706808209409

apwgqa.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1175200724860448769

sdmzzq.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1179549550681427968

vnopus.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1181723824578019328

tecise.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1182811018373849091

yongar.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1185710922788167680

auraot.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1185710944242012162

karasa.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1185710938097364992

finhjc.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1186072349692616704

haomas.com

# Reference: https://twitter.com/pancak3lullz/status/739874981320916992

irroie.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1189334135720030208
# Reference: https://twitter.com/DGAFeedAlerts/status/1189334131727044609
# Reference: https://twitter.com/DGAFeedAlerts/status/1189334119563571200

ebetho.com
ovaroc.com
whycjn.com

# Reference: https://twitter.com/DGAFeedAlerts/status/1190421276650852358
# Reference: https://twitter.com/DGAFeedAlerts/status/1190421271135305733
# Reference: https://twitter.com/DGAFeedAlerts/status/1190421265678503938

chnzcm.com
hngbhp.com
manewo.com
