# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/24000/PD24786/en_US/McAfee_Labs_Threat_Advisory_Ransom_Cryptolocker.pdf

deadwalk32.ru
imagecenterdown.ru
officeimage.ru
soudpmiyvxmd.org
wxfaxwfotkcp.co.uk
avlpfgiqwdudk.info
irvggrirvsqqy.com
gbpboroxfiep.co.uk
xvaqocjidsht.info
ngmneoxxoisqk.com
jnwsjavtnkvmh.net
ofoauksakmgs.info
soywduppiyvf.com
udsmjlwhfkmeg.net
dyddkwwieairg.biz
crjxtpyytwxf.com
tmtntatjrhbj.net
intkitmowpkrw.biz
euepnfkkvrnnf.ru
qgyvutxttqaj.net
upjsdeujrdpv.biz
vlqtsbjlaojjg.ru
ehbktmjmyefwg.org
estttyesdbrv.biz
vnejtjydblua.ru
jvrrrjysrthwg.org
fdcwwuwoqvkso.co.uk
uwuexnaukgiy.ru
ynnivqvmcyxxr.org
hjxywcvnbotlg.co.uk
fxcyhrpfigvcu.info
vupuoseotond.org
mxoguylttevli.co.uk
ifylakjpsgyhf.info
sidwgwvsyqlxu.com
hdauthcpbwblw.net
oxibtrwnccaej.org
ntmpidpuhvjxm.com
pykluscfamoho.biz
unbssmidrhqhn.biz
dsfyhcdkeiprs.co.uk
opnclitaxswlu.net
qulxxxgkqjcun.ru
bnhdumqalrkij.ru
qdgwghjxusfnj.info
igemsolqdaotb.org
jjrtvxqpkhxem.org
loppindadxdnv.info
mkqclshftuqbu.com
tnfhkwqywydsb.net
hxgfjfggoebgr.biz
uvdotgvjluqgb.ru

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2015-072908-2643-99&tabid=2

decryptoraveidf7.onion.to

# Reference: http://www.symantec.com/security_response/writeup.jsp?docid=2016-022219-1829-99&tabid=2

annaflowersweb.com

# Reference: http://www.symantec.com/security_response/writeup.jsp?docid=2016-021519-3303-99&tabid=2

drivers-softprotect.eu
testcryp.eu

# Reference: http://www2.kedst.ac.uk/web/files/index.php?dir=Resources_for_International_Agents%2F&download=DECRYPT_INSTRUCTIONS.html

erhitnwfvpgajfbu.onion
erhitnwfvpgajfbu.onion.gq
erhitnwfvpgajfbu.onion.lt
erhitnwfvpgajfbu.onion.cab
erhitnwfvpgajfbu.onion.city
erhitnwfvpgajfbu.onion.direct
erhitnwfvpgajfbu.onion.link
erhitnwfvpgajfbu.onion.nu
erhitnwfvpgajfbu.tor2web.fi
erhitnwfvpgajfbu.tor2web.blutmagie.de
erhitnwfvpgajfbu.tor2web.org
erhitnwfvpgajfbu.tor2web.ru
erhitnwfvpgajfbu.tor-gateways.de
erhitnwfvpgajfbu.tor4u.net
erhitnwfvpgajfbu.door2tor.org

# Reference: https://twitter.com/jedisct1/statuses/638661301460422656

nuservermail.net
aservermail.net
majorservice.net
giantservice.net