# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: djvu ransomware, stop ransomware

# Reference: https://twitter.com/petrovic082/status/1187762565969043457
# Reference: https://app.any.run/tasks/03afa5cb-2d8d-4cd0-a7ab-4e1bd7464db6/

ring1.ug

# Reference: https://twitter.com/abuse_ch/status/1209817867719467009
# Reference: https://www.virustotal.com/gui/domain/ring2.ug/relations

ring2.ug

# Reference: https://github.com/silence-is-best/c2db#filecoderstop

/As73yhsyU34578hxxx/
/As73yhsyU34578hxxx1/
/Asjdi435784ihjk65pen2/
/ydtftysdtyftysdfsdpen3/
/SDf565g/get.php

# Reference: https://twitter.com/JAMESWT_MHT/status/1270993904154873856
# Reference: https://app.any.run/tasks/b0502ef7-61f7-4e9e-87a1-bc7c3a102980/

cjto.top

# Reference: https://www.virustotal.com/gui/file/00ef13f2b577fca62b2100d9cb6306873abe2b57e97a05137217d911d449dd73/detection

mopg.top

# Reference: https://www.virustotal.com/gui/file/a36dabb110579e39137deb5f2330b86e581999d6cc5fa181112fe9742eb5f078/detection
# Reference: https://www.virustotal.com/gui/file/67e2337ee7de4cdd82c33357bf01d4f8098f2119bbeaad61b8e481c7a6671328/detection
# Reference: https://www.virustotal.com/gui/ip-address/85.114.134.88/detection

85.114.134.88:483
85.114.134.88:486
