# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/ESETresearch/status/1438827056037613570
# Reference: https://www.welivesecurity.com/2021/09/17/numando-latam-banking-trojan/
# Reference: https://github.com/eset/malware-ioc/tree/master/numando#cc-servers

138.91.168.205:733
20.195.196.231:733
20.197.228.40:779
enjoyds.s3.us-east-2.amazonaws.com
lksluthe.s3.us-east-2.amazonaws.com
procjdcals.s3.us-east-2.amazonaws.com
rmber.s3.ap-southeast-2.amazonaws.com
sucessmaker.s3.us-east-2.amazonaws.com
trbnjust.s3.us-east-2.amazonaws.com
webstrage.s3.us-east-2.amazonaws.com
