# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.fortinet.com/blog/threat-research/old-cyber-gang-uses-new-crypter-scrubcrypt
# Reference: https://www.virustotal.com/gui/ip-address/185.17.0.19/relations
# Reference: https://www.virustotal.com/gui/file/0258d2414ff41c7eabc12a9deb00109974c17f3e4e061e97dcd61f9c4f0dc8dd/detection

http://179.43.155.202
http://185.17.0.19
http://209.141.38.219
http://45.142.122.11
http://79.137.203.156
pf.letmaker.top
su-95.letmaker.top
work.letmaker.top
