| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Hancitor 10/8/2019 | Oct 8th, 2019 | Never | 1,797 | 0 | None | - |
| Hancitor 07/01/2019 | Jul 1st, 2019 | Never | 1,776 | 0 | None | - |
| TrickBot sat10 Template | Jul 6th, 2018 | Never | 2,398 | 0 | None | - |
| Hancitor/Tordal: BUILD=1204b | Apr 12th, 2017 | Never | 1,327 | 0 | None | - |
| vawtrak 305 c2s | Dec 20th, 2016 | Never | 909 | 0 | None | - |
| config thing | Aug 26th, 2016 | Never | 512 | 0 | None | - |
| IronSource new domains | Aug 19th, 2016 | Never | 217 | 0 | None | - |
| Retefe Swiss config | Jun 22nd, 2016 | Never | 1,317 | 0 | None | - |
| CryptoWall XYZ links | Mar 2nd, 2016 | Never | 775 | 0 | None | - |
| more locky | Feb 24th, 2016 | Never | 373 | 0 | None | - |
| Nymaim delivery domains | Feb 23rd, 2016 | Never | 230 | 0 | None | - |
| Cryptowall links | Feb 23rd, 2016 | Never | 150 | 0 | None | - |
| _mjllin.dll | Feb 23rd, 2016 | Never | 1,209 | 0 | None | - |
| _rcqwap_box.dll | Feb 23rd, 2016 | Never | 396 | 0 | None | - |
| Brazil banker junk | Feb 23rd, 2016 | Never | 119 | 0 | None | - |
| Locky downloads 2/18 | Feb 18th, 2016 | Never | 349 | 0 | None | - |
| Locky downloads | Feb 17th, 2016 | Never | 361 | 0 | None | - |
| Locky junk | Feb 16th, 2016 | Never | 915 | 0 | None | - |
| Teslacrypt links | Feb 9th, 2016 | Never | 316 | 0 | None | - |
| Pony -> Vawtrak links | Dec 23rd, 2015 | Never | 320 | 0 | None | - |
| Turkish TorrentLocker stuff | Aug 28th, 2015 | Never | 377 | 0 | None | - |
| CryptoWall crypt7 | Aug 10th, 2015 | Never | 1,043 | 0 | None | - |
| Cryptowall | Jun 8th, 2015 | Never | 1,107 | 0 | None | - |
| CryptoWall crypt13 | Jun 2nd, 2015 | Never | 1,813 | 0 | None | - |
| Zeus variant | Jun 2nd, 2015 | Never | 1,278 | 0 | None | - |
| Some strings | May 26th, 2015 | Never | 596 | 0 | None | - |
| Cryptowall crypt7 | May 26th, 2015 | Never | 2,097 | 0 | None | - |
| CryptoWall check-ins | May 20th, 2015 | Never | 378 | 0 | None | - |
| Geodo/Emotet config stuff | May 19th, 2015 | Never | 1,473 | 0 | None | - |
| Dridex bot 123 settings | May 12th, 2015 | Never | 559 | 0 | None | - |
| Dridex bot 122 settings | May 12th, 2015 | Never | 375 | 0 | None | - |
| Dridex bot 200 settings | May 11th, 2015 | Never | 1,562 | 0 | None | - |
| Hedsen Get_letter example | May 8th, 2015 | Never | 518 | 0 | None | - |
| Dridex bot 120 settings | May 7th, 2015 | Never | 2,144 | 0 | None | - |
| Some Dyre bit.ly links | May 4th, 2015 | Never | 521 | 0 | None | - |
| Dyre spam containing Rig EK link | May 4th, 2015 | Never | 1,389 | 0 | None | - |
| related domains | Apr 30th, 2015 | Never | 432 | 0 | None | - |
| get_letter example | Apr 30th, 2015 | Never | 1,165 | 0 | None | - |
| Dridex bot 220 settings | Apr 30th, 2015 | Never | 896 | 0 | None | - |
| Upatre campaign: TSS12 | Apr 30th, 2015 | Never | 726 | 0 | None | - |
| get_letter | Apr 23rd, 2015 | Never | 815 | 0 | None | - |
| hedsen powered dyre campaign | Apr 22nd, 2015 | Never | 782 | 0 | None | - |
| dyre/dyreza spambot sending out these urls | Apr 21st, 2015 | Never | 779 | 0 | None | - |
| andromeda stuff | Apr 16th, 2015 | Never | 458 | 0 | None | - |
| Hancitor and Dyreza hosting IP addresses | Apr 15th, 2015 | Never | 1,970 | 0 | None | - |
| decoded jjencoded upatre | Apr 10th, 2015 | Never | 463 | 0 | None | - |
| Dridex bot 200 settings | Apr 9th, 2015 | Never | 26,846 | 0 | None | - |
| Dridex bot 125 settings | Apr 9th, 2015 | Never | 28,913 | 0 | None | - |
| Macro -> hancitor->Vawtrak dropper-> Vawtrak DLL | Apr 8th, 2015 | Never | 567 | 0 | None | - |
| Snippet of dyre config | Apr 6th, 2015 | Never | 641 | 0 | None | - |
| InstallCore domains for 4/3/2015 | Apr 3rd, 2015 | Never | 504 | 0 | None | - |
| Cryptowall | Apr 3rd, 2015 | Never | 678 | 0 | None | - |
| Dridex 125 ips | Apr 2nd, 2015 | Never | 303 | 0 | None | - |
| Dridex IPs 120 | Apr 2nd, 2015 | Never | 529 | 0 | None | - |
| Dridex bot 120 settings | Apr 2nd, 2015 | Never | 951 | 0 | None | - |
| Dridex 3/31/2015 for botnets 120 and 125 | Mar 31st, 2015 | Never | 858 | 0 | None | - |
