[Rig EK via Ngay drops Smokeloader -> XMR Miner]
https://app.any.run/tasks/b7e731ff-bb63-4c35-9d05-9563b0cf3bbc
[Ngay website]
http://ngay23ne.cf/
[Rig EK]
95.142.40.156/?MzgxODM2&cPYHLkYjsmFVv&EJYLCWYWvUjvv=c2Vh&taa1fdf4=SwFkmo0JUllAo6qv20XXnBXOiZTRrxHfYwlM9pGXEbU62171yrUcJs8gxxKGv2UDz-ktYl4gpQ5R2a3I&CfAhVDc=bWF0Y2h1cA==&fdsfdf2f=xH3QMrLYbRvFFYHfKPjEUKFEMUzWA0WKwYqZha3VF52xFDLGpbf1FxnspVmdCF6EmvBvdLYHIweh1UHA&FHPuTi=c2My&ovDjFZE=c3BvcnQ=&JSAEZcJAkFd=c3BvcnQ=&RuCLfEO=Zmx5&legNPlsETwKkg=c2My&GiMwZnYbSG=cmVzb3J0&AZmnEVlq=c2Vh&grKiNf=c2hha2U=&muzWnaAmdkMnQQA=Zmx5
95.142.40.156/?MTc2NjY1&cekfIykJUoYI&cwiZnsqIEHQJD=cmVzb3J0&KmMqKlOa=bWF0Y2h1cA==&taa1fdf4=mooJUllAo62v20LXnBXOiZTRrxbfYw5M9paXEbU621n1yrIcJsggxxKGv2IDz-ktUFkZ5g4Smq37VaKO-0RA&VQgGUoXRnE=cmVzb3J0&nFjQFhTPYe=cmVzb3J0&BcEofaweoOvWtc=Zmx5&rWGLdhqXZGcFXj=Zmx5&xMFHdeOuEc=cmVzb3J0&fdsfdf2f=xH3QMrXYbRzFFYbfKPjEUKFEMUzWA0WKwY2Zha3VF5qxFDXGpbD1FxnspVmdCF6EmvBvdLEHIweh1UbASwFk&SFVLuTQthBFTR=bW9uZXk=&GqggOT=Zmx5&WQkrumqieW=bWF0Y2h1cA==&qQLwKfkqzg=bW9uZXk= H
95.142.40.156/?MTg3MTQ2&hHMYjtHkpKu&lkMOTUPnYEmMpQ=cmVzb3J0&tVenPpxCdrw=cmVzb3J0&pobOlQWdgyR=c2Vh&HIbVckvDgAF=Zmx5&EqdubimCyBEmNvj=cmVzb3J0&uxRgNIacQkvA=c2hha2U=&taa1fdf4=mo0JUl5Ao62v20LXnBLOiZPRrxHfYwlM9pGXEbI62171yrUcJs8gxxKGv2UDz-4tUFkZ6Q4Tna37S6KJrkNA&fdsfdf2f=xHrQMrXYbRvFFYbfKP_EUKFEMUzWA0WKwYqZha3VF52xFDXGpbf1Fx7spV6dCF6EmvBvdLYHIwCh1UHASwZk&PiRpBNtPDJmfMEC=Zmx5&EvtlJbE=c2My&hktJoBoJ=c2My&XcbeQKe=c2My&ujAAVecB=c2Vh
[Smoke Loader]
nhocbo.bit
206.189.198.140/khost.exe
[XMR Miner]
nhocboconfig.ru/bo/config.txt
sg.minexmr.com
139.99.120.73:4444