# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_luckycat_redux.pdf

89757.x.gg
bailianlan.c.dwyu.com
cattree.1x.biz
charlesbrain.shop.co
clbest.greenglassint.net
duojee.info
fidk.rkntils.dnset.com
fireequipment.website.org
footballworldcup.website.org
frankwhales.shop.co
goodwell.all.co.uk
havefuns.rkntils.10dig.net
hi21222325.x.gg
jeepvihecle.shop.co
johnnees.rkntils.10dig.net
killmannets.0fees.net
kinkeechow.shop.co
kittyshop.kilu.org
lucysmith.0fees.net
maritimemaster.kilu.org
masterchoice.shop.co
perfect.shop.co
pumasports.website.org
rkntils.10dig.net
rkntils.dnset.com
rukiyeangel.dyndns.pro
sunshine.shop.co
tb123.xoomsite.com
tbda123.gwchost.com
tennissport.website.org
toms.0fees.net
tomsburs.shop.co
tomygreen.0fees.net
vpoasport.shopping2000.com
waterpool.website.org

# Reference: https://blog.talosintelligence.com/2019/02/exilerat-shares-c2-with-luckycat.html

27.126.188.212:80
27.126.188.212:8003
27.126.188.212:8005
mondaynews.tk
peopleoffreeworld.tk
gmailcom.tw

# Generic trails

/aqqee
