# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://securelist.com/basbanke-trend-setting-brazilian-banking-trojan/90365/

dodothebest.esy.es
zalthome.esy.es
servcobranca.in
ibercob.com.br
rootcenter.com.br
royhols.com
autopecasecreta.com.br
investcerto.site
bancobrasil.mobi
citiapp.mobi
ltau.mobi
moduloempresa.com
noisquevoa.mobi
pagseguro.mobi
aplicativo-sms.com

# Reference: https://twitter.com/malwrhunterteam/status/1267853279217823748

googleplaybr.ga

# Reference: https://twitter.com/malwrhunterteam/status/1280212682378010624

googlepla.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1282763645211086850
# Reference: https://twitter.com/malwrhunterteam/status/1282763820935655425

googleplay-app.sytes.net
playstories.cf

# Reference: https://twitter.com/malwrhunterteam/status/1326902976871542784
# Reference: https://twitter.com/bl4ckh0l3z/status/1326929791686242305
# Reference: https://www.virustotal.com/gui/ip-address/184.164.70.25/relations
# Reference: https://www.virustotal.com/gui/file/6ff9689025c204b4cf400c3eef7be8759cdad52206dcb5245a5e504c4fd0b11d/detection

api-dnsapp.xyz
kosnane-fata.xyz
mellat-app.com
mellat-hamrahe.com

# APK

/MellatBank.apk
/PJ-ID.apk
/Protetor-Servicos-Empresariais.apk
