Underminer EK IOC

Underminer Ek domains:
shorico.club
shorico.xyz
shortu.live
shortu.icu
howtocom.site
attendantscloud.club
cjcedu.club
serverssky.club
themofft.com
onetouchauthentication.club
onetouchauthentication.icu
onetouchauthentication.online
onetouchauthentication.xyz
thatvent.org
well-known-services.space
well-known-services.website
well-known.online
well-known.services
wwwsafefinderformac.com
androidosfree.com

Malicious Subdomains:
news.onetouchauthentication.icu
news.onetouchauthentication.xyz
can.well-known.services
news.onetouchauthentication.online
news.onetouchauthentication.club
can.well-known-services.space
can.well-known-services.website
can.well-known.online
dns.howtocom.site
mta5.themofft.com
wordpress.well-known-services.website
mail.well-known.services
mail.well-known.online
mail.cjcedu.club
mail.serverssky.club
mail.attendantscloud.club
rican.thatvent.org
jungle.wwwsafefinderformac.com
us101.androidosfree.com
us103.androidosfree.com
us102.androidosfree.com

Sample(thanks @nao_sec):
https://app.any.run/tasks/0693e523-6228-43fa-af9b-758688062c11/