Mirrors
/
Gi7w0rm-MalwareConfigLists
mirror of https://github.com/Gi7w0rm/MalwareConfigLists
10
0
Fork 0
Code Issues Releases Wiki Activity

Add files via upload 

List extracted from 385 samples.
Only 65 resulted in actual configs.
This commit is contained in:
Gi7w0rm 2021-09-18 19:36:06 -07:00 committed by GitHub
parent 0d47443550
commit e9941a79c0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 131 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

131
RedLine/RedLine_configs.csv Normal file
View File

@ -0,0 +1,131 @@
SHA265,C2_Proxy,Campaign_ID,Enc_Key
0193e29baf9746fc70bb078b954de75153adb46cb93f9342f059bf8adab98040," ""185.241.54.128:47729"""," ""@ULUS11"""," ""Blotters""
"
9283a7ec1f495eaa521dfb7dc078c614dbe17aeae998576518953a4b5a4c17e2," ""gamallastu.xyz:80"""," ""ghost"""," ""Random""
"
f3bd165982995400b2f861021e54b7b17f58fac7bf031e27a7edc34b8be0a936," ""194.226.139.24:7732"""," ""@Qauelsb"""," ""Mappers""
"
419d84ea0cbca1b972ba8f64aae0256104c7b5c9fa1fb938674ede05864451db," ""45.133.217.203:23497"""," ""@reworkenxyz"""," ""Traves""
"
56c26a2b13759364f9cc066e2d876bcca463ea1c699b0fe63774686922029f72," ""91.142.79.218:9781"""," ""@esaymane"""," ""Perusals""
"
ab5c2bdc6b3391c94971ccefeb8552a2de837478465617232248525264e0badc," ""185.204.109.146:54891"""," ""www"""," ""Deflorate""
"
38df33e5620212d6d993610a8cf2f8620e18c91266cde9773072cb53f98a7dbd," ""45.14.49.232:6811"""," ""fopoejpvcepjvwe[9"""," ""Throwing""
"
3a83e58f8dc0015d65374b7715f89acf15ff08c82837c8f6f66f64db21732644," ""185.250.206.82:21330"""," ""@TrippieLZT"""," ""Cicatrice""
"
41583d50aa4458788132cb26c1dc83a135d419b70e29efed30217f797d6a13ff," ""95.181.157.130:11418"""," ""1"""," ""Sabotaged""
"
fad0ca06bacf9f247ac03d9366abd3ac41415e56af0ea16bdff70f6ca77ed41a," ""45.14.49.200:27625"""," ""Second_7.5K"""," ""Flippantly""
"
721bca352b8d920d1dde1839e349db73663e3c8c568c681a15bf68fd4a10a9e9," ""185.250.206.82:21330"""," ""@fezyXZ"""," ""Jumpy""
"
85aae29a25d1ef63599adec00be8e67b7ae4eab36ff485454ecf58a6e3540485," ""141.95.23.41:62480"""," ""ACD"""," ""Forgivably""
"
8690f23daba75d77e1191cae591e415e311348a6e20a6af3575768387c91280f," ""185.250.206.82:21330"""," ""@seefeld_logs"""," ""Weldless""
"
f2c2ae6b9f8945f21f8d232657c6a4d4b66cac8f8a6563f032a56b7565673be7," ""45.129.236.6:56220"""," ""install2285"""," ""Stick""
"
ebfbb91b4d57e70a7b5b2a24a5bb78ee143a6f8f2edafe2b3c1c8dd7d61b930d," ""185.250.206.82:21330"""," ""@anzLZT"""," ""Ansated""
"
a64e76651d86aa8a3ba7c8f4dbb2f141483facc158023a714777875f8f708941," ""198.98.49.129:23948"""," ""cd14"""," ""Rhymes""
"
6d73dadc04e29540fb4a16b97a924cc9aaf51e38b84c5e1cfa7805f623e4267d," ""185.224.132.232:64354"""," ""@Crocodile_O1"""," ""Idleness""
"
a128b48cab71139b2c84969e733c1778508566a75228febcdd0a9e86a6473994," ""185.186.142.245:1778"""," ""installzo"""," ""Fire""
"
171c0968fc8c8eba4e8a577723b50e7b23971905c4b056262e3b31103cb3a593," ""45.140.147.31:22127"""," ""zalupa228"""," ""Isopod""
"
d0f4a657b018b7d3911f5905d1514a327ec2621723a3157b61a821f72f669d33," ""185.224.132.232:64354"""," ""@desssiredd"""," ""Rong""
"
3239f1e24443e92f85337dd2c578b6d51f2d22a77719e39cc55fbf63886835e4," ""86.105.252.21:34503"""," ""@lolmine4"""," ""Scabbled""
"
b2c5577e8c882eee0be28cb16350b7aa48c3052d410d421da4a9620a8c86807d," ""45.14.49.200:27625"""," ""FIRST_7.5k"""," ""Sonnies""
"
a35518b5be67fad36ce6037f2c79d85fa1f9deab01aac9e34c21fde5f2b13eb8," ""159.69.178.36:37556"""," ""ww"""," ""Terakihi""
"
e0c5e5c7e3b414cf11f2b0423e399bba10eeed0069b21b399a3caf886ac2cd3a," ""45.82.176.76:43679"""," ""@aran_welaso20"""," ""Musketoons""
"
5179b913e59a263bae49cb3ddd5fe79269a2796537fe675767264dd30ffa0a38," ""softwarebeast.live:80"""," ""mongol"""," ""Backed""
"
3de11e9ba2b8db6be4069506a95bc31250d8ae8d0df5e8fec66121a05f1ccbc6," ""51.89.92.99:5965"""," ""@JABKA9983"""," ""Goggles""
"
7e11f3d5986ac2c32716bcad3b59fd27f00fbed79ae57e1b76c3afb9762fbfc8," ""198.98.49.129:23948"""," ""cd13"""," ""Parched""
"
77227b667f5cd74963793cda1cad94c60f3cd1a02e76677f690f683af537f749," ""198.98.49.129:23948"""," ""rcd"""," ""Oversown""
"
912e87d951fb0303ca22db42510cce17e8f12bd37c23937a69e2f8a0c81b3c06," ""65.21.228.92:46802"""," ""installs3"""," ""Squelches""
"
ccd68168bf8ff2be38ec3886689b8c64aba0b89e3d99dc7f030db21fb0e7afcb," ""213.166.68.170:16810"""," ""4"""," ""Espionage""
"
93294f23cc879d497276dfcb0def6cbb8d33617648f75358f213886f6e5682b4," ""185.224.132.232:64354"""," ""@twixrf"""," ""Unhele""
"
b25de8622f43e2beb203e0e394906bd6832f95277f53c4dbd59d4afbcef7b361," ""65.21.228.92:46802"""," ""installs2"""," ""Disembowel""
"
e2dba259192d31594e6352774f189b38d680789d8a481a8d873d01d89f20d23a," ""2.56.59.235:61159"""," ""5050"""," ""Subscribe""
"
dd015fe4a916f31b5b650bd6d787c594119b09ee523f046a68dbdd725ba04c5f," ""77.220.214.232:13459"""," ""@Stewor"""," ""Lissomely""
"
aa3ef811cfeacbe782715219b91eb5f798780b6e81a3dd31eb4c2a8851689b54," ""185.237.165.126:25598"""," ""FBtraff"""," ""Madeleines""
"
7b1233e19c3bac48a1f49ec33923f7504efaa20fb5b798ff9a00f73cbc2422c1," ""45.82.176.76:43679"""," ""@aran_welaso20"""," ""Overveils""
"
ddaa218a629d5d9c1cbc4158b6fba8f0e02c6bfa58afb79cb87947aef81e062d," ""185.250.206.82:21330"""," ""@JuicyFruicy1"""," ""Amirs""
"
8cbafd04f32cc48843fcac1913ae731b04e990a44d789a74b0ef50785874d5aa," ""178.32.202.118:43127"""," ""installs"""," ""Updates""
"
db80af4e3d8c906facdda32cf164125c71887fa990276bd2490b8228d9f71b18," ""62.182.158.148:1104"""," "" Proliv-test4"""," ""Dictation""
"
af11c77941022f0efc33a3ebdf9c43dd4c2ffda084ee26522909c9ad5f06d513," ""62.182.158.148:1104"""," ""botnet"""," ""Tool""
"
6f1904a99189848d5856b7872fa366e4ebea02531e8155da6c29bcd8d64e4353," ""103.246.146.46:11573"""," ""[hyzhdjaiw99182]209"""," ""Terpenes""
"
0ccfbc16ae8b084b8ea6c8585ec8973f78304e18ad0317b51beca03c5c0eb499," ""188.119.113.123:58760"""," ""test1"""," ""Dishevel""
"
b3b10dd428f6843a7fe7a3b32aeb530910da6bbe3bf45b6b1688b3701ace2200," ""45.14.49.117:14251"""," ""40k_EXTRA"""," ""Diseconomy""
"
ee634bdc72e1a5b57eb1f7d42e5d0a4b7c9b1f7aa53a1f53564bf4ff5c74361a," ""hiconvanor.xyz:80"""," ""CryMore2"""," ""Chevrette""
"
b7d1cd353a32285386f76a35535953e8a328323c5c837359d67e31d0d6315c70," ""185.250.206.122:43180"""," ""1890703250"""," ""Backchat""
"
3cc3678682dc887a9f5e168717967fc266e266a5fd5dfe10e210d26b7246e5c4," ""51.254.69.209:48987"""," ""@mecenaty"""," ""Monochrome""
"
6f14dcd1c276f021ae900501a048f461ff849ef59dbc860339911a28ace7c757," ""185.186.142.55:10425"""," ""@bbakoch"""," ""Piebald""
"
dcaf58a74327239aff106eb7da1f06a9ad9bceeaad4e8a08496fa75f744e8f55," ""95.217.159.87:4348"""," ""@Yuki4onna"""," ""Naevi""
"
6d807d0723b2a5cc11bb2f7e83b678cfd9f981c17dc9fa32d6c79aa42dfd31bd," ""209.250.247.73:64156"""," ""abobi isid"""," ""Shiftless""
"
cd2cb1220011afa6a1bfc8f5457bba94964777743247a0b374f1147c9204ed66," ""87.120.37.152:5605"""," ""pool"""," ""Disgracing""
"
1d928c0f640e731208adc0736aca791af0ba7e7dfdad0800d9de2fc968ef0010," ""95.217.159.87:4348"""," ""@Stewor"""," ""Lunkers""
"
bc8d88ca40f99941862ee5e2948de359f59de068c02e11a5e50f8e0c6a096899," ""87.120.37.152:5605"""," ""red"""," ""Undetected""
"
215fe6cb15f087bb8c0b5e33437317cb94bd8902bd3027aeadcda78329518441," ""213.166.68.170:16810"""," ""3"""," ""Beg""
"
c44f4f19f854e3a7312d262f8225024d3eb235fc580f4175ab923a4acd0231ff," ""95.217.159.87:4348"""," ""@sc4lly1337"""," ""Durukulis""
"
6da210965cd769856bbcb8bb501abf25c832f0f6a70e73240436629ce6362fa9," ""95.217.159.87:4348"""," ""@sc4lly1337"""," ""Sucre""
"
a9413d0e72606171e933d573c31949d552662e4bb62461b12840ab6c8e008c6e," ""185.237.165.126:25598"""," ""YTtraffic"""," ""Bashful""
"
50641b6873076f461c03ebb7937514a2d4a5d494a5143492ad6b8b22131a2190," ""45.14.49.117:14251"""," ""5k_COSMO"""," ""Mendings""
"
c7ec5e55d90f05cda97e8de87ce1026dc926e7e7aaeb4d2f5051cadd1043bc79," ""45.76.235.60:49976"""," ""daop"""," ""Siriasis""
"
2bfb577e9f16eb75fb71df9c1e22b9576dbcd95e1ffb3371ca1aabfacf6917fc," ""185.250.206.82:21330"""," ""@Cryptex777"""," ""Revise""
"
cc2cc6baae7dea7349b52df05fe18659ee0e85750020ce2592c1e433686cd4e4," ""45.82.179.116:10425"""," ""@worker2005"""," ""Seclusion""
"
d34e796266410aff6fcad07b74545d3121bfc595cadef5370c01153b4dbf0047," ""185.186.142.55:10425"""," ""@bbakoch"""," ""Corbelling""
"
6e4f20b04fee92074f9d640a80ebf28c27510e89c20cbd3c66f00a3ec2fd3989," ""45.82.179.116:10425"""," ""@bbakoch"""," ""Zigans""
"
cfead95d7c8a5769d14c2d5cf989237af61be10241de21523f8a955e5b36f1e7," ""185.186.142.55:10425"""," ""@bbakoch"""," ""Sheas""
"
1fa4cb9ae67e44a4b628d71882b536d39fb3d7e1a73317c5d4e5d2c90da1a997," ""193.38.235.12:29867"""," ""@dedperdedyshka"""," ""Soberise""
"
2cb5d586b1e5511df8134203c1533d3d49107f53c84156cb3f0083c9d75dd0b0," ""yonicathal.xyz:80"""," ""NetFramework"""," ""Vandalise""
"
1 SHA265 C2_Proxy Campaign_ID Enc_Key
2 0193e29baf9746fc70bb078b954de75153adb46cb93f9342f059bf8adab98040 "185.241.54.128:47729" "@ULUS11" "Blotters"
3 9283a7ec1f495eaa521dfb7dc078c614dbe17aeae998576518953a4b5a4c17e2 "gamallastu.xyz:80" "ghost" "Random"
4 f3bd165982995400b2f861021e54b7b17f58fac7bf031e27a7edc34b8be0a936 "194.226.139.24:7732" "@Qauelsb" "Mappers"
5 419d84ea0cbca1b972ba8f64aae0256104c7b5c9fa1fb938674ede05864451db "45.133.217.203:23497" "@reworkenxyz" "Traves"
6 56c26a2b13759364f9cc066e2d876bcca463ea1c699b0fe63774686922029f72 "91.142.79.218:9781" "@esaymane" "Perusals"
7 ab5c2bdc6b3391c94971ccefeb8552a2de837478465617232248525264e0badc "185.204.109.146:54891" "www" "Deflorate"
8 38df33e5620212d6d993610a8cf2f8620e18c91266cde9773072cb53f98a7dbd "45.14.49.232:6811" "fopoejpvcepjvwe[9" "Throwing"
9 3a83e58f8dc0015d65374b7715f89acf15ff08c82837c8f6f66f64db21732644 "185.250.206.82:21330" "@TrippieLZT" "Cicatrice"
10 41583d50aa4458788132cb26c1dc83a135d419b70e29efed30217f797d6a13ff "95.181.157.130:11418" "1" "Sabotaged"
11 fad0ca06bacf9f247ac03d9366abd3ac41415e56af0ea16bdff70f6ca77ed41a "45.14.49.200:27625" "Second_7.5K" "Flippantly"
12 721bca352b8d920d1dde1839e349db73663e3c8c568c681a15bf68fd4a10a9e9 "185.250.206.82:21330" "@fezyXZ" "Jumpy"
13 85aae29a25d1ef63599adec00be8e67b7ae4eab36ff485454ecf58a6e3540485 "141.95.23.41:62480" "ACD" "Forgivably"
14 8690f23daba75d77e1191cae591e415e311348a6e20a6af3575768387c91280f "185.250.206.82:21330" "@seefeld_logs" "Weldless"
15 f2c2ae6b9f8945f21f8d232657c6a4d4b66cac8f8a6563f032a56b7565673be7 "45.129.236.6:56220" "install2285" "Stick"
16 ebfbb91b4d57e70a7b5b2a24a5bb78ee143a6f8f2edafe2b3c1c8dd7d61b930d "185.250.206.82:21330" "@anzLZT" "Ansated"
17 a64e76651d86aa8a3ba7c8f4dbb2f141483facc158023a714777875f8f708941 "198.98.49.129:23948" "cd14" "Rhymes"
18 6d73dadc04e29540fb4a16b97a924cc9aaf51e38b84c5e1cfa7805f623e4267d "185.224.132.232:64354" "@Crocodile_O1" "Idleness"
19 a128b48cab71139b2c84969e733c1778508566a75228febcdd0a9e86a6473994 "185.186.142.245:1778" "installzo" "Fire"
20 171c0968fc8c8eba4e8a577723b50e7b23971905c4b056262e3b31103cb3a593 "45.140.147.31:22127" "zalupa228" "Isopod"
21 d0f4a657b018b7d3911f5905d1514a327ec2621723a3157b61a821f72f669d33 "185.224.132.232:64354" "@desssiredd" "Rong"
22 3239f1e24443e92f85337dd2c578b6d51f2d22a77719e39cc55fbf63886835e4 "86.105.252.21:34503" "@lolmine4" "Scabbled"
23 b2c5577e8c882eee0be28cb16350b7aa48c3052d410d421da4a9620a8c86807d "45.14.49.200:27625" "FIRST_7.5k" "Sonnies"
24 a35518b5be67fad36ce6037f2c79d85fa1f9deab01aac9e34c21fde5f2b13eb8 "159.69.178.36:37556" "ww" "Terakihi"
25 e0c5e5c7e3b414cf11f2b0423e399bba10eeed0069b21b399a3caf886ac2cd3a "45.82.176.76:43679" "@aran_welaso20" "Musketoons"
26 5179b913e59a263bae49cb3ddd5fe79269a2796537fe675767264dd30ffa0a38 "softwarebeast.live:80" "mongol" "Backed"
27 3de11e9ba2b8db6be4069506a95bc31250d8ae8d0df5e8fec66121a05f1ccbc6 "51.89.92.99:5965" "@JABKA9983" "Goggles"
28 7e11f3d5986ac2c32716bcad3b59fd27f00fbed79ae57e1b76c3afb9762fbfc8 "198.98.49.129:23948" "cd13" "Parched"
29 77227b667f5cd74963793cda1cad94c60f3cd1a02e76677f690f683af537f749 "198.98.49.129:23948" "rcd" "Oversown"
30 912e87d951fb0303ca22db42510cce17e8f12bd37c23937a69e2f8a0c81b3c06 "65.21.228.92:46802" "installs3" "Squelches"
31 ccd68168bf8ff2be38ec3886689b8c64aba0b89e3d99dc7f030db21fb0e7afcb "213.166.68.170:16810" "4" "Espionage"
32 93294f23cc879d497276dfcb0def6cbb8d33617648f75358f213886f6e5682b4 "185.224.132.232:64354" "@twixrf" "Unhele"
33 b25de8622f43e2beb203e0e394906bd6832f95277f53c4dbd59d4afbcef7b361 "65.21.228.92:46802" "installs2" "Disembowel"
34 e2dba259192d31594e6352774f189b38d680789d8a481a8d873d01d89f20d23a "2.56.59.235:61159" "5050" "Subscribe"
35 dd015fe4a916f31b5b650bd6d787c594119b09ee523f046a68dbdd725ba04c5f "77.220.214.232:13459" "@Stewor" "Lissomely"
36 aa3ef811cfeacbe782715219b91eb5f798780b6e81a3dd31eb4c2a8851689b54 "185.237.165.126:25598" "FBtraff" "Madeleines"
37 7b1233e19c3bac48a1f49ec33923f7504efaa20fb5b798ff9a00f73cbc2422c1 "45.82.176.76:43679" "@aran_welaso20" "Overveils"
38 ddaa218a629d5d9c1cbc4158b6fba8f0e02c6bfa58afb79cb87947aef81e062d "185.250.206.82:21330" "@JuicyFruicy1" "Amirs"
39 8cbafd04f32cc48843fcac1913ae731b04e990a44d789a74b0ef50785874d5aa "178.32.202.118:43127" "installs" "Updates"
40 db80af4e3d8c906facdda32cf164125c71887fa990276bd2490b8228d9f71b18 "62.182.158.148:1104" " Proliv-test4" "Dictation"
41 af11c77941022f0efc33a3ebdf9c43dd4c2ffda084ee26522909c9ad5f06d513 "62.182.158.148:1104" "botnet" "Tool"
42 6f1904a99189848d5856b7872fa366e4ebea02531e8155da6c29bcd8d64e4353 "103.246.146.46:11573" "[hyzhdjaiw99182]209" "Terpenes"
43 0ccfbc16ae8b084b8ea6c8585ec8973f78304e18ad0317b51beca03c5c0eb499 "188.119.113.123:58760" "test1" "Dishevel"
44 b3b10dd428f6843a7fe7a3b32aeb530910da6bbe3bf45b6b1688b3701ace2200 "45.14.49.117:14251" "40k_EXTRA" "Diseconomy"
45 ee634bdc72e1a5b57eb1f7d42e5d0a4b7c9b1f7aa53a1f53564bf4ff5c74361a "hiconvanor.xyz:80" "CryMore2" "Chevrette"
46 b7d1cd353a32285386f76a35535953e8a328323c5c837359d67e31d0d6315c70 "185.250.206.122:43180" "1890703250" "Backchat"
47 3cc3678682dc887a9f5e168717967fc266e266a5fd5dfe10e210d26b7246e5c4 "51.254.69.209:48987" "@mecenaty" "Monochrome"
48 6f14dcd1c276f021ae900501a048f461ff849ef59dbc860339911a28ace7c757 "185.186.142.55:10425" "@bbakoch" "Piebald"
49 dcaf58a74327239aff106eb7da1f06a9ad9bceeaad4e8a08496fa75f744e8f55 "95.217.159.87:4348" "@Yuki4onna" "Naevi"
50 6d807d0723b2a5cc11bb2f7e83b678cfd9f981c17dc9fa32d6c79aa42dfd31bd "209.250.247.73:64156" "abobi isid" "Shiftless"
51 cd2cb1220011afa6a1bfc8f5457bba94964777743247a0b374f1147c9204ed66 "87.120.37.152:5605" "pool" "Disgracing"
52 1d928c0f640e731208adc0736aca791af0ba7e7dfdad0800d9de2fc968ef0010 "95.217.159.87:4348" "@Stewor" "Lunkers"
53 bc8d88ca40f99941862ee5e2948de359f59de068c02e11a5e50f8e0c6a096899 "87.120.37.152:5605" "red" "Undetected"
54 215fe6cb15f087bb8c0b5e33437317cb94bd8902bd3027aeadcda78329518441 "213.166.68.170:16810" "3" "Beg"
55 c44f4f19f854e3a7312d262f8225024d3eb235fc580f4175ab923a4acd0231ff "95.217.159.87:4348" "@sc4lly1337" "Durukulis"
56 6da210965cd769856bbcb8bb501abf25c832f0f6a70e73240436629ce6362fa9 "95.217.159.87:4348" "@sc4lly1337" "Sucre"
57 a9413d0e72606171e933d573c31949d552662e4bb62461b12840ab6c8e008c6e "185.237.165.126:25598" "YTtraffic" "Bashful"
58 50641b6873076f461c03ebb7937514a2d4a5d494a5143492ad6b8b22131a2190 "45.14.49.117:14251" "5k_COSMO" "Mendings"
59 c7ec5e55d90f05cda97e8de87ce1026dc926e7e7aaeb4d2f5051cadd1043bc79 "45.76.235.60:49976" "daop" "Siriasis"
60 2bfb577e9f16eb75fb71df9c1e22b9576dbcd95e1ffb3371ca1aabfacf6917fc "185.250.206.82:21330" "@Cryptex777" "Revise"
61 cc2cc6baae7dea7349b52df05fe18659ee0e85750020ce2592c1e433686cd4e4 "45.82.179.116:10425" "@worker2005" "Seclusion"
62 d34e796266410aff6fcad07b74545d3121bfc595cadef5370c01153b4dbf0047 "185.186.142.55:10425" "@bbakoch" "Corbelling"
63 6e4f20b04fee92074f9d640a80ebf28c27510e89c20cbd3c66f00a3ec2fd3989 "45.82.179.116:10425" "@bbakoch" "Zigans"
64 cfead95d7c8a5769d14c2d5cf989237af61be10241de21523f8a955e5b36f1e7 "185.186.142.55:10425" "@bbakoch" "Sheas"
65 1fa4cb9ae67e44a4b628d71882b536d39fb3d7e1a73317c5d4e5d2c90da1a997 "193.38.235.12:29867" "@dedperdedyshka" "Soberise"
66 2cb5d586b1e5511df8134203c1533d3d49107f53c84156cb3f0083c9d75dd0b0 "yonicathal.xyz:80" "NetFramework" "Vandalise"