# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: neojit, Psychlo NewBoss

# Reference: https://www.mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=472
# Reference: https://securitynews.sonicwall.com/xmlpost/psychlo-newboss-v1-0-bot-analysis/
# Reference: https://www.virustotal.com/gui/file/c9840c130842133a682532561a74a98fce1e000eb47d3e74feda619cbdd958dc/detection
# Reference: https://hybrid-analysis.com/sample/9111dabc35d3540fa4dcc9d1d14b1d7d9af5cdc095853a851b699f000f1a0ccf
# Reference: https://vms.drweb.fr/virus/?i=1736313&lng=en
# Reference: https://vms.drweb.fr/virus/?i=1738985&lng=en

11f0a3.co.cc
5eeb937af5c3804ff2ebb150cfb8646e.twilightparadox.com
agv.mooo.com
avast-oloko-bixo.ignorelist.com
avsta.mooo.com
bd5af1f6.dyndns.org
psychlo.co.cc
server1.u147852369.codisk.com

# Reference: https://ideone.com/fork/CYMY4

05a184.co.cc

# Reference: https://lists.emergingthreats.net/pipermail/emerging-sigs/2012-December/020987.html

e77lzbgasyhun.mooo.com
f32w14gqqvnfax.mooo.com
i9cofxif5uz6i7.mooo.com
id0hx24nz8.mooo.com
poqjik8iv0.mooo.com
q04leu6wmk.mooo.com
r4qjwq40c4.mooo.com
tf6qzs0witws-0.mooo.com

# Generic

/newg/a.php
/bdj106_5613.php
/dxohf241_5874.php
/fdje106_5613.php
/nnxybd231_5619.php
/owxryn107_5613.php
/taedi107_5613.php
/twp211_5613.php
/udhnj106_5613.php
/uxm211_5613.php
/vigpkh241_5688.php
/yhxvgz106_5613.php
/zkzd106_5613.php
