# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://ransomwaretracker.abuse.ch/tracker/cerber/


i01001.dgn.vn
chromebewfk.top
chromefastl.top
chromehakc.top
cleverdotl.top
ddiopoola.top
dealkolld.top
dokjasura.top
fkauueeepla.top
flowerxpo.top
foolalexas.top
googlefoad.top
newsectorbs.top
watherfka.top
weekendlk.top
zutzt67dcxr6mxcn.onion.to

# Reference: https://isc.sans.edu/diary/Sage%2B2.0%2BRansomware/21959

cocalolo.top
truepokemonant.top

# Generic trails

\b(27lelchgcvs2wpm7|4kqd3hmqgptupi3p|52uo5k3t73ypjije|ahuqfrqk54v3vnzj|avsxrcoq2q5fgrw2|cerberhhyed5frqa|ffoqr3ug7m726zou|fnmi62725zfti2vy|ftoxmpdipwobp4qy|hjhqmbxyinislkkt|lfdachijzuwx4bc4|oqwygprskqv65j72|p27dokhpz2n7nvgr|pe2cku7pebkpgeko|pmenboeqhyrpvomq|qfjhpgbefuhenjp7|unocl45trpuoefft|vyohacxzoue32vvk|wjtqjleommc4z46i|xpcx6erilkjced3j|xrhwryizf5mui7a5)\.[a-z0-9]+\.[a-z]{2,}
