# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.trendmicro.com/en_us/research/21/h/chaos-ransomware-a-dangerous-proof-of-concept.html
# Reference: https://twitter.com/WebDFIR/status/1516517223166271507
# Reference: https://www.virustotal.com/gui/ip-address/162.240.68.177/relations
# Reference: https://twitter.com/James_inthe_box/status/1516801529008713733
# Reference: https://twitter.com/James_inthe_box/status/1516802764222861312
# Reference: https://www.virustotal.com/gui/file/83c581012182ac862c2b0c85c6c6b489fae537dd120c3f5c4574caa1a964f4c3/detection
# Reference: https://www.virustotal.com/gui/file/e5d9e6755940b23f5355e0605c1805eb0eca3a5e6eaf9bd898589edd2ac57e83/detection

aouynop.cf
aouynop.ga
aouynop.gq
aouynop.ml
aouynopa.cf
aouynopa.ga
aouynopa.ml
aouynopa.tk
aouynopb.cf
aouynopb.ga
aouynopb.gq
aouynopb.ml
aouynopb.tk
aouynopc.cf
aouynopc.ga
aouynopc.ml
aouynopc.tk
aouynopd.cf
aouynopd.ga
aouynopd.gq
aouynopd.ml
aouynopd.tk
aouynope.cf
aouynope.ga
aouynope.gq
aouynope.ml
aouynope.tk
aouynopf.cf
aouynopf.ga
aouynopf.gq
aouynopf.ml
aouynopf.tk
aouynopg.cf
aouynopg.gq
aouynopg.tk
aouynoph.cf
aouynoph.ga
aouynoph.gq
aouynoph.ml
aouynoph.tk
aouynopj.cf
aouynopj.ga
aouynopj.gq
aouynopj.ml
aouynopj.tk
aouynopk.cf
aouynopk.ga
aouynopk.gq
aouynopk.ml
aouynopk.tk
aouynopm.cf
aouynopm.ga
aouynopm.gq
aouynopm.ml
aouynopm.tk
aouynopn.cf
aouynopn.ga
aouynopn.gq
aouynopn.ml
aouynopn.tk
aouynopo.cf
aouynopo.ga
aouynopo.gq
aouynopo.ml
aouynopo.tk
aouynopp.cf
aouynopp.ga
aouynopp.gq
aouynopp.ml
aouynopp.tk
aouynopr.cf
aouynopr.ga
aouynopr.gq
aouynopr.ml
aouynopr.tk
aouynops.cf
aouynops.ga
aouynops.gq
aouynops.ml
aouynops.tk
aouynopt.cf
aouynopt.ga
aouynopt.gq
aouynopt.ml
aouynopt.tk
aouynopu.cf
aouynopu.ga
aouynopu.gq
aouynopu.ml
aouynopu.tk
aouynopv.cf
aouynopv.ga
aouynopv.gq
aouynopv.ml
aouynopv.tk
aouynopw.cf
aouynopw.ga
aouynopw.gq
aouynopw.ml
aouynopw.tk
aouynopx.cf
aouynopx.ga
aouynopx.gq
aouynopx.ml
aouynopx.tk
aouynopy.cf
aouynopy.ga
aouynopy.gq
aouynopy.ml
aouynopy.tk
aouynopz.ga
aouynopz.gq
aouynopz.ml
aouynopz.tk
eofmrawsn.cf
eofmrawsn.ga
eofmrawsn.gq
eofmrawsn.ml
eofmrawsn.tk
oshgiut.cf
oshgiut.ga
oshgiut.gq
oshgiut.ml
oshgiut.tk
oshgiuta.cf
oshgiuta.ga
oshgiuta.gq
oshgiuta.tk
oshgiutb.cf
oshgiutb.ga
oshgiutb.gq
oshgiutb.ml
oshgiutb.tk
oshgiutc.cf
oshgiutc.ga
oshgiutc.gq
oshgiutc.ml
oshgiutc.tk
oshgiutd.cf
oshgiutd.ga
oshgiutd.gq
oshgiutd.ml
oshgiutd.tk
oshgiute.cf
oshgiute.ga
oshgiute.gq
oshgiute.tk
oshgiutf.cf
oshgiutf.ga
oshgiutf.gq
oshgiutf.ml
oshgiutf.tk
oshgiutg.cf
oshgiutg.ga
oshgiutg.gq
oshgiutg.ml
oshgiutg.tk
oshgiuth.cf
oshgiuth.ga
oshgiuth.gq
oshgiuth.ml
oshgiuth.tk
oshgiuti.cf
oshgiuti.ga
oshgiuti.gq
oshgiuti.ml
oshgiuti.tk
oshgiutj.cf
oshgiutj.ga
oshgiutj.gq
oshgiutj.ml
oshgiutj.tk
oshgiutk.cf
oshgiutk.ga
oshgiutk.gq
oshgiutk.ml
oshgiutk.tk
oshgiutm.cf
oshgiutm.ga
oshgiutm.gq
oshgiutm.ml
oshgiutm.tk
oshgiutn.cf
oshgiutn.ga
oshgiutn.gq
oshgiutn.ml
oshgiutn.tk
oshgiutq.cf
oshgiutq.ga
oshgiutq.gq
oshgiutq.tk
oshgiutqt.cf
oshgiutqt.ga
oshgiutqt.gq
oshgiutqt.ml
oshgiutqt.tk
oshgiutr.cf
oshgiutr.ga
oshgiutr.gq
oshgiutr.ml
oshgiutr.tk
oshgiuts.ga
oshgiuts.gq
oshgiuts.ml
oshgiuts.tk
oshgiutu.cf
oshgiutu.ga
oshgiutu.gq
oshgiutu.ml
oshgiutu.tk
oshgiutv.cf
oshgiutv.ga
oshgiutv.gq
oshgiutv.ml
oshgiutv.tk
oshgiutw.cf
oshgiutw.ga
oshgiutw.ml
oshgiutw.tk
oshgiutx.cf
oshgiutx.ga
oshgiutx.gq
oshgiutx.ml
oshgiutx.tk
oshgiuty.cf
oshgiuty.ga
oshgiuty.gq
oshgiuty.ml
oshgiuty.tk
oshgiutz.cf
oshgiutz.ga
oshgiutz.gq
oshgiutz.ml
oshgiutz.tk
otyfuwy.cf
otyfuwy.ga
otyfuwy.gq
otyfuwy.ml
otyfuwya.ga
otyfuwya.gq
otyfuwya.tk
otyfuwyb.cf
otyfuwyb.ga
otyfuwyb.gq
otyfuwyb.ml
otyfuwyb.tk
otyfuwyc.cf
otyfuwyc.ga
otyfuwyc.gq
otyfuwyc.ml
otyfuwyc.tk
otyfuwyd.cf
otyfuwyd.ga
otyfuwyd.gq
otyfuwyd.ml
otyfuwyd.tk
otyfuwyf.cf
otyfuwyf.ga
otyfuwyf.gq
otyfuwyf.ml
otyfuwyf.tk
otyfuwyj.cf
otyfuwyj.ga
otyfuwyj.gq
otyfuwyj.ml
otyfuwyj.tk
otyfuwyk.cf
otyfuwyk.ga
otyfuwyk.gq
otyfuwyk.ml
otyfuwyk.tk
otyfuwyl.cf
otyfuwyl.ga
otyfuwyl.gq
otyfuwyl.ml
otyfuwyl.tk
otyfuwym.cf
otyfuwym.ga
otyfuwym.ml
otyfuwym.tk
otyfuwyn.cf
otyfuwyn.ga
otyfuwyn.gq
otyfuwyn.ml
otyfuwyn.tk
otyfuwyp.cf
otyfuwyp.ga
otyfuwyp.gq
otyfuwyp.tk
otyfuwys.ga
otyfuwys.gq
otyfuwys.ml
otyfuwys.tk
otyfuwyv.cf
otyfuwyv.ga
otyfuwyv.gq
otyfuwyv.ml
otyfuwyv.tk
otyfuwyx.cf
otyfuwyx.gq
otyfuwyx.ml
otyfuwyx.tk
otyfuwyz.cf
otyfuwyz.ga
otyfuwyz.gq
otyfuwyz.ml
otyfuwyz.tk
pmbfytlk.cf
pmbfytlk.ga
pmbfytlk.gq
pmbfytlk.ml
pmbfytlk.tk
pmbfytlka.cf
pmbfytlka.ga
pmbfytlka.gq
pmbfytlka.ml
pmbfytlkb.cf
pmbfytlkb.ga
pmbfytlkb.gq
pmbfytlkb.ml
pmbfytlkb.tk
pmbfytlkc.cf
pmbfytlkc.ga
pmbfytlkc.gq
pmbfytlkc.ml
pmbfytlkc.tk
pmbfytlkd.cf
pmbfytlkd.ga
pmbfytlkd.gq
pmbfytlkd.ml
pmbfytlkd.tk
pmbfytlkf.cf
pmbfytlkf.ga
pmbfytlkf.gq
pmbfytlkf.ml
pmbfytlkf.tk
pmbfytlkg.cf
pmbfytlkg.ga
pmbfytlkg.gq
pmbfytlkg.ml
pmbfytlkg.tk
pmbfytlkh.cf
pmbfytlkh.ga
pmbfytlkh.gq
pmbfytlkh.ml
pmbfytlkh.tk
pmbfytlkj.cf
pmbfytlkj.ga
pmbfytlkj.gq
pmbfytlkj.ml
pmbfytlkj.tk
pmbfytlkk.cf
pmbfytlkk.ga
pmbfytlkk.gq
pmbfytlkk.ml
pmbfytlkk.tk
pmbfytlkm.cf
pmbfytlkm.ga
pmbfytlkm.gq
pmbfytlkm.ml
pmbfytlkm.tk
pmbfytlkn.cf
pmbfytlkn.ga
pmbfytlkn.gq
pmbfytlkn.ml
pmbfytlkn.tk
pmbfytlks.cf
pmbfytlks.ga
pmbfytlks.gq
pmbfytlks.ml
pmbfytlks.tk
pmbfytlkv.cf
pmbfytlkv.ga
pmbfytlkv.gq
pmbfytlkv.ml
pmbfytlkv.tk
pmbfytlkx.cf
pmbfytlkx.ga
pmbfytlkx.gq
pmbfytlkx.ml
pmbfytlkx.tk
pmbfytlkz.ga
pmbfytlkz.gq
pmbfytlkz.ml
pmbfytlkz.tk
pwuxmeud.cf
pwuxmeud.ga
pwuxmeud.gq
pwuxmeud.ml
pwuxmeud.tk
pwuxmeuda.cf
pwuxmeuda.ga
pwuxmeuda.gq
pwuxmeuda.ml
pwuxmeudad.ga
pwuxmeudad.ml
pwuxmeudad.tk
pwuxmeudaj.cf
pwuxmeudaj.ga
pwuxmeudaj.gq
pwuxmeudaj.ml
pwuxmeudaj.tk
pwuxmeudak.cf
pwuxmeudak.ga
pwuxmeudak.gq
pwuxmeudak.ml
pwuxmeudak.tk
pwuxmeudb.cf
pwuxmeudb.ga
pwuxmeudb.gq
pwuxmeudb.ml
pwuxmeudb.tk
pwuxmeudc.cf
pwuxmeudc.ga
pwuxmeudc.gq
pwuxmeudc.ml
pwuxmeudc.tk
pwuxmeude.cf
pwuxmeude.ga
pwuxmeude.gq
pwuxmeude.ml
pwuxmeude.tk
pwuxmeudf.cf
pwuxmeudf.ga
pwuxmeudf.gq
pwuxmeudf.ml
pwuxmeudf.tk
pwuxmeudg.cf
pwuxmeudg.ga
pwuxmeudg.gq
pwuxmeudg.ml
pwuxmeudg.tk
pwuxmeudh.cf
pwuxmeudh.ga
pwuxmeudh.gq
pwuxmeudh.ml
pwuxmeudh.tk
pwuxmeudi.cf
pwuxmeudi.ga
pwuxmeudi.gq
pwuxmeudi.ml
pwuxmeudi.tk
pwuxmeudm.cf
pwuxmeudm.ga
pwuxmeudm.gq
pwuxmeudm.ml
pwuxmeudm.tk
pwuxmeudn.cf
pwuxmeudn.ga
pwuxmeudn.gq
pwuxmeudn.ml
pwuxmeudn.tk
pwuxmeudq.cf
pwuxmeudq.ga
pwuxmeudq.gq
pwuxmeudq.ml
pwuxmeudq.tk
pwuxmeudr.cf
pwuxmeudr.ga
pwuxmeudr.gq
pwuxmeudr.ml
pwuxmeuds.cf
pwuxmeuds.ga
pwuxmeuds.gq
pwuxmeuds.ml
pwuxmeuds.tk
pwuxmeudt.ga
pwuxmeudt.gq
pwuxmeudt.ml
pwuxmeudt.tk
pwuxmeudu.cf
pwuxmeudu.ga
pwuxmeudu.gq
pwuxmeudu.ml
pwuxmeudu.tk
pwuxmeudv.cf
pwuxmeudv.ga
pwuxmeudv.gq
pwuxmeudv.ml
pwuxmeudv.tk
pwuxmeudw.cf
pwuxmeudw.ga
pwuxmeudw.tk
pwuxmeudx.cf
pwuxmeudx.ga
pwuxmeudx.gq
pwuxmeudx.ml
pwuxmeudx.tk
pwuxmeudy.ga
pwuxmeudy.gq
pwuxmeudy.ml
pwuxmeudy.tk
pwuxmeudz.ga
pwuxmeudz.gq
pwuxmeudz.ml
pwuxmeudz.tk
qwartw.cf
qwartw.ga
qwartw.gq
qwartw.ml
qwartw.tk
qwartwa.cf
qwartwa.ga
qwartwa.gq
qwartwa.ml
qwartwa.tk
qwartwb.cf
qwartwb.ga
qwartwb.gq
qwartwb.tk
qwartwc.cf
qwartwc.ga
qwartwc.gq
qwartwc.ml
qwartwc.tk
qwartwd.cf
qwartwd.ga
qwartwd.gq
qwartwd.ml
qwartwd.tk
qwartwe.cf
qwartwe.ga
qwartwe.gq
qwartwe.ml
qwartwe.tk
qwartwf.cf
qwartwf.ga
qwartwf.gq
qwartwf.ml
qwartwf.tk
qwartwg.cf
qwartwg.ga
qwartwg.gq
qwartwg.ml
qwartwg.tk
qwartwh.cf
qwartwh.ga
qwartwh.gq
qwartwh.ml
qwartwh.tk
qwartwj.cf
qwartwj.ga
qwartwj.gq
qwartwj.tk
qwartwk.cf
qwartwk.gq
qwartwk.ml
qwartwk.tk
qwartwl.cf
qwartwl.ga
qwartwl.gq
qwartwl.ml
qwartwl.tk
qwartwm.cf
qwartwm.ga
qwartwm.gq
qwartwm.ml
qwartwm.tk
qwartwn.cf
qwartwn.ga
qwartwn.gq
qwartwn.ml
qwartwn.tk
qwartwq.ga
qwartwq.gq
qwartwq.ml
qwartwq.tk
qwartwr.cf
qwartwr.ga
qwartwr.gq
qwartwr.ml
qwartwr.tk
qwartws.cf
qwartws.ga
qwartws.gq
qwartws.ml
qwartws.tk
qwartwt.cf
qwartwt.ga
qwartwt.gq
qwartwt.ml
qwartwt.tk
qwartwu.cf
qwartwu.ga
qwartwu.ml
qwartwu.tk
qwartwv.cf
qwartwv.ga
qwartwv.gq
qwartwv.ml
qwartwv.tk
qwartww.cf
qwartww.ga
qwartww.gq
qwartww.ml
qwartww.tk
qwartwx.cf
qwartwx.ga
qwartwx.gq
qwartwx.ml
qwartwx.tk
qwartwy.cf
qwartwy.gq
qwartwy.ml
qwartwy.tk
qwartwz.cf
qwartwz.ga
qwartwz.gq
qwartwz.ml
qwartwz.tk
waerdxoeu.cf
waerdxoeu.ga
waerdxoeu.gq
waerdxoeu.ml
waerdxoeu.tk
waerdxoeua.cf
waerdxoeua.ga
waerdxoeua.gq
waerdxoeua.ml
waerdxoeua.tk
waerdxoeub.cf
waerdxoeub.gq
waerdxoeub.ml
waerdxoeub.tk
waerdxoeuc.cf
waerdxoeuc.ga
waerdxoeuc.gq
waerdxoeuc.ml
waerdxoeuc.tk
waerdxoeug.cf
waerdxoeug.ga
waerdxoeug.gq
waerdxoeug.ml
waerdxoeug.tk
waerdxoeuh.cf
waerdxoeuh.ga
waerdxoeuh.gq
waerdxoeuh.ml
waerdxoeuh.tk
waerdxoeuj.cf
waerdxoeuj.ga
waerdxoeuj.gq
waerdxoeuj.ml
waerdxoeuj.tk
waerdxoeuk.cf
waerdxoeuk.ga
waerdxoeuk.gq
waerdxoeuk.ml
waerdxoeuk.tk
waerdxoeul.cf
waerdxoeul.ga
waerdxoeul.gq
waerdxoeul.ml
waerdxoeul.tk
waerdxoeum.cf
waerdxoeum.ga
waerdxoeum.gq
waerdxoeum.ml
waerdxoeum.tk
waerdxoeun.cf
waerdxoeun.ga
waerdxoeun.gq
waerdxoeun.ml
waerdxoeun.tk
waerdxoeuq.cf
waerdxoeuq.ga
waerdxoeuq.gq
waerdxoeuq.ml
waerdxoeuq.tk
waerdxoeus.cf
waerdxoeus.ga
waerdxoeus.gq
waerdxoeus.ml
waerdxoeus.tk
waerdxoeuv.cf
waerdxoeuv.ga
waerdxoeuv.gq
waerdxoeuv.ml
waerdxoeuv.tk
waerdxoeux.cf
waerdxoeux.ga
waerdxoeux.gq
waerdxoeux.ml
waerdxoeux.tk
waerdxoeuz.cf
waerdxoeuz.ga
waerdxoeuz.gq
waerdxoeuz.ml
waerdxoeuz.tk

# Reference: https://www.virustotal.com/gui/file/0fd56384d2b39661d2a81b16bd5aa72ae4deb023dda532796acc94516fc1b9de/detection
# Reference: https://app.any.run/tasks/ccecbcd8-f578-40c7-be8a-8bf59e751e0e/

papka142.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1753036851869311095
# Reference: https://www.virustotal.com/gui/file/b1181bc89db74b9ccb317298b5b5b33b0f0c73854d5e1e2167a9a84eda367366/detection

lockshitass2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
lockshitass34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion
lockshitass5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion
lockshitass6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
lockshitassc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion
lockshitassjpikdqjynvgozhgc6bgetgucdk5xjacozeaawihmoio6yd.onion
lockshitassoofrpignlz6dt2wqqc5z3a4evjevoa3eqdfcntxad5lmyd.onion
lockshitassq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion
lockshitassstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion

# Reference: https://x.com/AlvieriD/status/1906803908556538179

hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion

# Generic

/abc123def456ghi789/
