MD5,,https://malwr.com/analysis/M2E5NWEwY2U3MGJlNDMxNzg2YTM1NGM5NGE3OWJhNDA/ MD5,0155738045b331f44d300f4a7d08cf21,https://malwr.com/analysis/ZDRiYTc4MDk0YjRiNDIxZTg4NWFmN2FjODAzNTEyNzk/ MD5,02d6519b0330a34b72290845e7ed16ab,http://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/Unveiling an Indian Cyberattack Infrastructure - appendixes.pdf MD5,0d5956dac2ac56f292ee8fa121450973,http://malwr.com/analysis/NWM0ZDUzMjUxODk0NDMxNjg5YTI5MmM2ZTU1ZjY5NzQ/ MD5,0fcb4ffe2eb391421ec876286c9ddb6c,https://malwr.com/analysis/NWFlYTQzMjdmNGVkNGNjMGE4M2RjNzMzNzI3MmZkNDk/ MD5,11504971bb85cdacb8ef7d45e6e2aeb7,http://malwr.com/analysis/MDk4Y2NkOWQyNzU0NGU5ZTkxMDQzOGY4ZTRjOWY5NzA/ MD5,151115ddf1cd4b474a9106cfebcb82e4,https://totalhash.com/analysis/4ce1a6de82a07b0b2ac21039e81cc0bc5b32e476 MD5,19ba802c49895d010e8499e9740b9e8b,https://malwr.com/analysis/MTJiZjQ3MTZmMDlhNGMxZDk5NmRhODNjNjAzMjQ0MGM/ MD5,2102a18dc20dc6654c03e0e74f36033f,http://malwr.com/analysis/MDExOTZhMDM1NzIxNGY4YmEzMjhiNTFjZTljYjZhY2E/ MD5,2111622fe5d058ec14e3081c039de739,https://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf MD5,217d8e8be955136b4fd9215cb3e1bdf0,https://malwr.com/analysis/ZDFhNzVmNWJlZDJkNDk3NThlNDA0YzAzNmZmYjQyYWI/ MD5,2fcf134008b8bd0eca20c73692e486b2,https://malwr.com/analysis/NzM5NWFkMjc0ZDA4NGRhNDg1YmMwNDQ3OTNlMjYzZDA/ MD5,3403f7a37d0250fef4fd457c52ce2dde,https://totalhash.cymru.com/analysis/?5693d9517b572e29ea9342db2e4f6abe85d5775d MD5,3459bc37967480dee405a5ac678b942d,https://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf MD5,352f29914fb1acbfe1e597d8fc548b01,https://malwr.com/analysis/ZDJkMjRlMWQ1Y2M1NGRiMWFjZjMwZDgwZThmZDJkNzE/ MD5,37ddd3d72ead03c7518f5d47650c8572,http://malwr.com/analysis/OGZjN2Q2Njg5OThhNGU5OWE2N2E3YjgyNTk5ODg3MTU/ MD5,38e8421ec8ccb06a9e5aafa550e2b669,https://totalhash.com/analysis/3d965472894473a83eeaaaa2f27d1e7ff8cdf856 MD5,39fc4a3ea44ab9822ed5e77808803727,https://malwr.com/analysis/Mzg5MzU0Mjg4NjU2NDU0Yzg0ZDYyODc3NzkzNDc5ODI/ MD5,435991e0c67f0c0b4504355b6d4493f0,http://malwr.com/analysis/MTQxMTE5MzBhMzkwNDA5YmE3MGQxNzVmZTAwZTMzYWU/ MD5,45ed5d42ffb87aba95b17b48b4225a75,http://malwr.com/analysis/Y2ExYTI5YTMwODBhNDQ1ZWE3OTk4ZTY3OTMxMWFkZDY/ MD5,51eaec282b845bc54dbd4fbce5bb09d8,https://malwr.com/analysis/MzYwZDkzOGY3MjdjNDhhMDk2OTIyZGY3ZDAzZGU2NzM/ MD5,57e79f7df13c0cb01910d0c688fcd296,http://malwr.com/analysis/ZDQ2ODEzNmI1MGIyNDM4ZmE4OTU1OGQ4ZWYwMjU5NGE/ MD5,5aeaa53340a281074fcb539967438e3f,http://malwr.com/analysis/NjIzMTE0ODFhYTViNDgyNjgyZjg5MGUyNzNkYWE3NDA/ MD5,5e42780f52763c77d592044e535e4b01,http://malwr.com/analysis/ZTg3Y2ExZjYyMmRiNDdmMTllMmVkMWYzNGU3NzQ0YWM/ MD5,66d6bfa67e90c97d8486b68321fbc55e,https://malwr.com/analysis/Y2EzMjA5M2QwODVjNDcxNDg1MDRmYmExYmE5NWFmZjY/ MD5,68ca3d3fc4901d1af8d3adc3170af6ad,https://malwr.com/analysis/OGY5N2E1OGMzNzQxNDAxMGI0NTA0MjJiOTliNzI2NGQ/ MD5,6a79c842a6edca3460b0026cd16c3670,https://malwr.com/analysis/MTdhZWM0NGY2OTNlNDU3NThlMGM5MTQ2YjVhYzlhMDI/ MD5,6de1b481ae52fbacd7db84789a081b74,https://malwr.com/analysis/NDFlODZlMGY3Zjk2NDczNjg3YmNlZTYwN2I3MWVkOGQ/ MD5,7071242821d43e86e640902c735c7559,https://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf MD5,70a0412d19d55bcab72e76c984694215,https://malwr.com/analysis/MjU1ZGUwOTZhMmIzNGY2YzllNDYzODM2NWQzNjIwM2E/ MD5,71a0d1718a24c14917d25cb8699470a2,https://malwr.com/analysis/ZmUzZWRjOTA5MTFkNDViN2E1YTUyZGM4ZTllZmY0YmU/ MD5,7708c23332ee541b0c4b748abc4a1af7,http://malwr.com/analysis/NWI5NzkyNTgwZmVhNDU5YTk3MzY1ZjQ1N2I2ZmU3MDM/ MD5,828489e2f1334bf3e27b3aad39cd5b00,https://totalhash.com/analysis/78e530eee09bc9d740746796283c0b0c38fc4010 MD5,82ab0b8246c6677f9866b17794b72e2d,https://malwr.com/analysis/OWIzYmJkMzJmZDZkNDg1YTkzZmY4YjkyMDlmNjIwMjM/ MD5,871cc547feb9dbec0285321068e392b8,http://malwr.com/analysis/MDcwMGZhMzM5YTlhNDYxNjgxYjUxNTc2NTFmZTQwNzI/ MD5,89de19ff50dd58eda2b136b65feb3fb0,https://malwr.com/analysis/YmFhMmM1ODFmMGQyNGY1NjkyZjQ0OGMxMWE1YmQ1YWM/ MD5,89ec3461ef4a893428c32f89de78b396,https://malwr.com/analysis/YmM2OWVlNzk2ZmJlNGVlNmJkOTY5MTU2MDIwZjE0Yzc/ MD5,9218d5c27ffa1c7dabad832154d475ff,http://www.cryptam.com/docsearch.php?sha256=295060efe7df9a4253fd6d0fb6cc90007ac2b4a074393c99c486108b241a639c MD5,9606a63428f0c065a70cf9a91728bdf8,http://malwr.com/analysis/OWEwZjc5MDM1NTRhNDZhZTk2ZmYxOWIzZmI4ZThmZDY/ MD5,9a22932f46d0d55189b169fa30f1d8e8,https://totalhash.cymru.com/analysis/?6db9583ecd50a52fd39549518d25c7f63356e6b3 MD5,9ac6e3de69e75190862a94c94c193d2c,http://malwr.com/analysis/ZTk0OTgzMzJlNzcyNDQ0ZGJjOTMwYzY5OTcxMTkyNTA/ MD5,a131d12bc9ab7983b984c81e5e7e108e,https://totalhash.com/analysis/2b8030e9df8552d8f1e3734c1029cf67b599f9e2 MD5,a6f55037cb02911c5624e70a67704156,https://totalhash.com/analysis/ef567196212a4c1e2b5c650d5876bfeb8201cd32 MD5,aa3786de7ba4505afba87703c30e0e5b,https://malwr.com/analysis/ZjZmY2M0ZWI4MmM4NDQ3MDg4OTFiZjU3NDM2ZGRmOGI/ MD5,ab887f60040df29c23de4e0ff2dc2213,http://malwr.com/analysis/MThiMzRhNTFkNjQ2NGI2Yjg5YmUxOTdhZWVlYTRmMWY/ MD5,b1ee00cec6c2318fa86f320dd7fc99a8,http://malwr.com/analysis/OTkxOWI2OWQ4NjM0NDYxNzkzZDc3YTExNDczODIxMzY/ MD5,bab8ca687e80a3831bb382147ab9c471,https://totalhash.cymru.com/analysis/?b1a90f10c82cd73fd84d8581bb40b1c2fa46aa52 MD5,bb4e5ec34608d02e2d9b90ca23e19df3,https://malwr.com/analysis/MWFjZjU0YWYyNTU1NDNiNWJiNzRjZTlhMTcxMTk3Yzc/ MD5,c021555eb7417b7d72f8fd4616645b16,https://malwr.com/analysis/YTBkNGQyNTM1ZDQ3NDhjMDlkYWEzNTAwNWM4OGVmODk/ MD5,c4c638750526e28f68d6d71fd1266bdf,http://malwr.com/analysis/YWNiMTc3OGM0ZmQ4NGFhMGJlYjBkYWYwM2ZiNjc5NWU/ MD5,d0f4f1e80c6982a1c57336b9404469ed,https://malwr.com/analysis/MzA1ZDU5MDcwNjNiNDEyYjgzYzQ4M2M1MDg4NWQzYTk/ MD5,d220679433b2a319683cb184635e7556,https://www.hybrid-analysis.com/sample/b40084185f4eac8449587c3472e0fda2635736bb7623fe93af11f273db0feb48/?environmentId=1 MD5,d22863c5e6f098a4b52688b021beef0a,http://malwr.com/analysis/ODU4YmI2NzkwZGE2NGZjZWI4MjFjZWZlZDRiNDMyMzg/ MD5,d93026b1c6c828d0905a0868e4cbc55f,https://malwr.com/analysis/MTg2MjFmNGY0NzNiNDg5M2FkZGJhOTljYmM4OWVhN2M/ MD5,dc9ec51a3d9732a7b6aff31b4ce8a282,https://totalhash.com/analysis/65a4d9aa2c0aa575b1188ffe94e7e5e4fd281afa MD5,f1322bd54a4e68c8026e7ce06f3040d8,https://totalhash.com/analysis/cb5b0da410de5c9b3a9349b4eb6778979d407b0f MD5,f237843c03484a31197efb2aec3d5bd9,http://malwr.com/analysis/MzI3MzM1NWQ0MjI5NDAzMmFjMWEzNWY3ODQ4YTE2N2Y/ MD5,f475c6cc431785742bbcc1b10205dc89,https://malwr.com/analysis/MjY4MjczNTljZWUzNDAyMWI1MDY0MWViMDNiOTNjMGU/ MD5,f60ca07853e335e2d90351b17a0e8ec3,https://totalhash.com/analysis/d60dfbbd05df41747e5bc77ab8424614ad1ef2a6 MD5,f6cf9c71ecb5b10e595b076b0ea9178d,https://malwr.com/analysis/N2NiYzg0YTRhYWJmNDc3NGJlM2VkY2E0NTRhMzJhODE/ MD5,fda0320d1e28bc022e4d9e9aae544db4,https://totalhash.com/analysis/c3e552ca78fa53984c04de44c17e25c3a06259f1 MD5,fe82d8178345ea53fa66fd7253cf7dc0,https://malwr.com/analysis/YWRlNjczMWY2ZTg2NDllMmJkZmQ1YWQyNTIwMWNiNDc/ DOMAIN,an.pbfsnet.com, DOMAIN,arsaic.pbfsnet.com, DOMAIN,bae.pbfsnet.com, DOMAIN,bbs.pbfsnet.com, DOMAIN,blog.pbfsnet.com, DOMAIN,bs.pbfsnet.com, DOMAIN,can.pbfsnet.com, DOMAIN,cars.pbfsnet.com, DOMAIN,clifflog.pbfsnet.com, DOMAIN,db.pbfsnet.com, DOMAIN,gzsc.pbfsnet.com, DOMAIN,info.pbfsnet.com, DOMAIN,itt.pbfsnet.com, DOMAIN,jdtt.pbfsnet.com, DOMAIN,juju.pbfsnet.com, DOMAIN,just2.pbfsnet.com, DOMAIN,living.pbfsnet.com, DOMAIN,mail.foxypredators.com, DOMAIN,mail.pbfsnet.com, DOMAIN,mailsrv.pbfsnet.com, DOMAIN,my-net.pbfsnet.com, DOMAIN,mynet.pbfsnet.com, DOMAIN,new-soho.pbfsnet.com, DOMAIN,new.pbfsnet.com, DOMAIN,ninjia.pbfsnet.com, DOMAIN,nowf.pbfsnet.com, DOMAIN,oct.pbfsnet.com, DOMAIN,para.pbfsnet.com, DOMAIN,pbfsnet.pbfsnet.com, DOMAIN,prettywidow.pbfsnet.com, DOMAIN,reccheck.pbfsnet.com, DOMAIN,rember.pbfsnet.com, DOMAIN,rukie.pbfsnet.com, DOMAIN,sbae.pbfsnet.com, DOMAIN,selex.pbfsnet.com, DOMAIN,sin.pbfsnet.com, DOMAIN,slrouji.pbfsnet.com, DOMAIN,supperrr.pbfsnet.com, DOMAIN,tech.pbfsnet.com, DOMAIN,themmdance.pbfsnet.com, DOMAIN,thgjb.pbfsnet.com, DOMAIN,updates.pbfsnet.com, DOMAIN,winself.pbfsnet.com, DOMAIN,www.microsoft-xpupdate.com, DOMAIN,www.pbfsnet.com, DOMAIN,zrsaic.pbfsnet.com, DOMAIN,mail.microsoft-xpupdate.com, DOMAIN,eventshosting.com,http://pastebin.com/PP1CTtZH DOMAIN,newstatisticfeeder.com,http://pastebin.com/PP1CTtZH DOMAIN,e.ifexcel.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,ftp.defenceonline.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,m.ifexcel.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,mail.cnndaily.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,moto2.earthsolution.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,navi.earthsolution.org,http://pastebin.com/yKSQd5Z455 DOMAIN,news.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.defenceonline.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.freshreaders.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.hugesoft.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.lksoftvc.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.nationtour.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,news.nytimesnews.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,nukor001.hugesoft.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,num.safalife.com,http://pastebin.com/yKSQd5Z495 DOMAIN,o.ifexcel.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,pact.hugesoft.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,pars.earthsolution.org,http://pastebin.com/yKSQd5Z534 DOMAIN,part.earthsolution.org,http://pastebin.com/yKSQd5Z536 DOMAIN,parth.earthsolution.org,http://pastebin.com/yKSQd5Z537 DOMAIN,pdoc.earthsolution.org,http://pastebin.com/yKSQd5Z539 DOMAIN,pop.defenceonline.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,pop.usnewssite.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,qedh.earthsolution.org,http://pastebin.com/yKSQd5Z581 DOMAIN,reas.hugesoft.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,report.regicsgf.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,security.symanteconline.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,sells.aunewsonline.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,sells.usnewssite.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,share.aunewsonline.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,sky.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,slrj.softsolutionbox.net,http://pastebin.com/yKSQd5Z650 DOMAIN,smtp.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,smtp.cnndaily.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,source.livemymsn.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,sports.voiceofman.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,star.satellitebbs.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,suffering.e-cardsshop.comsuffering.mcafeepaying.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,sw.hugesoft.org,http://pastebin.com/yKSQd5Z708 DOMAIN,tag.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,test.bpyoyo.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,test.issnbgkit.net,http://pastebin.com/yKSQd5Z718 DOMAIN,top.ifexcel.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,travel.nationtour.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,ttl.tfxdccssl.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,ug-ga.hugesoft.org,http://pastebin.com/yKSQd5Z747 DOMAIN,ug-irpf.hugesoft.org,http://pastebin.com/yKSQd5Z749 DOMAIN,ug-man.hugesoft.org,http://pastebin.com/yKSQd5Z751 DOMAIN,ug-piec.hugesoft.org,http://pastebin.com/yKSQd5Z755 DOMAIN,ug-volpe.hugesoft.org,http://pastebin.com/yKSQd5Z764 DOMAIN,update.idirectech.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,update.nationtour.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,update.tfxdccssl.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,utex.earthsolution.org,http://pastebin.com/yKSQd5Z777 DOMAIN,velp.earthsolution.org,http://pastebin.com/yKSQd5Z779 DOMAIN,vope.purpledaily.comvopm.earthsolution.org,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,weather.staycools.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,web.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,web.thehealthmood.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,web.webservicesupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,webmail.aunewsonline.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,wpvn.softsolutionbox.net,http://pastebin.com/yKSQd5Z840 DOMAIN,www.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.aunewsonline.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.idirectech.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.mcafeepaying.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.nationtour.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.safety-update.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.satellitebbs.comwww.searchforca.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.skyswim.net,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,www.webservicesupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,wwwi.earthsolution.org,http://pastebin.com/yKSQd5Z859 DOMAIN,xawh.earthsolution.org,http://pastebin.com/yKSQd5Z862 DOMAIN,ctch.earthsolution.org,http://pastebin.com/yKSQd5Z171 DOMAIN,centstat.org,http://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/Unveiling an Indian Cyberattack Infrastructure - appendixes.pdf DOMAIN,google.com.accountsserviceloginservicemaileng.serviceaccountloginservicemail.inf, DOMAIN,linkedin.com-uas.login-submit.account.session-full.login-3a5077708027557787984-c, DOMAIN,pajerolive.com,https://github.com/kbandla/APTnotes/blob/master/2013/Unveiling%20an%20Indian%20Cyberattack%20Infrastructure%20-%20appendixes.pdf?raw=true DOMAIN,cnowor.pbfsnet.com, DOMAIN,conceiver.pbfsnet.com, DOMAIN,dcfrr.pbfsnet.com, DOMAIN,download.pbfsnet.com, DOMAIN,dtwcrec.pbfsnet.com, DOMAIN,e-pneuma.pbfsnet.com, DOMAIN,euro.pbfsnet.com, DOMAIN,facepiece.pbfsnet.com, DOMAIN,first.pbfsnet.com, DOMAIN,funnybar.pbfsnet.com, DOMAIN,fytt.pbfsnet.com, DOMAIN,gogo.pbfsnet.com, DOMAIN,gove.pbfsnet.com, DOMAIN,pop.applesoftupdate.com,http://sto-strategy.com/s/Appendix-D-Digital-FQDNs.pdf DOMAIN,shopingcard.net,http://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/Unveiling an Indian Cyberattack Infrastructure - appendixes.pdf DOMAIN,www.facebook.com-l0giin.php.mstl0giintocpassiive-trrue.contiinue-2fsiignin3facti, DOMAIN,zolipas.info,http://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/Unveiling an Indian Cyberattack Infrastructure - appendixes.pdf DOMAIN,info.whandjg.net,http://www.secureworks.com/cyber-threat-intelligence/threats/secrets-of-the-comfoo-masters/ DOMAIN,www.greenhawthorn.com,http://www.secureworks.com/cyber-threat-intelligence/threats/secrets-of-the-comfoo-masters/ DOMAIN,stareastnet.com.tw,http://blog.cassidiancybersecurity.com/post/2014/07/The-Eye-of-the-Tiger DOMAIN,acers.com.tw,http://blog.cassidiancybersecurity.com/post/2014/07/The-Eye-of-the-Tiger DOMAIN,foxcom.com.tw,http://blog.cassidiancybersecurity.com/post/2014/07/The-Eye-of-the-Tiger DOMAIN,dopodo.com.tw,http://blog.cassidiancybersecurity.com/post/2014/07/The-Eye-of-the-Tiger DOMAIN,chat.feiloglobe.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,news.feiloglobe.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,resell.siseau.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,sports.feiloglobe.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,survey.ctable.org,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,temp.renewgis.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,wins.windowsupdote.net,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,web.creativezh.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,www.psactel.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,sports.graceland-siu.org,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,rj.cbssrayli.com,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,www.osonline.info, DOMAIN,www.zerodayexploits.org, DOMAIN,www.groupskm.info, DOMAIN,www.woline.info, DOMAIN,www.primaaltus.org, DOMAIN,www.ctswebup.info, DOMAIN,www.crvhostia.net, DOMAIN,www.testerspoint.info, DOMAIN,www.ozoneparty.info, DOMAIN,www.heavenaffiliates.info, DOMAIN,www.accountsserviceloginservice.info, DOMAIN,www.khalistancalling.com, DOMAIN,www.webmailaccountservicemail.info, DOMAIN,www.frameworkup.org, DOMAIN,www.lynberrg.com, DOMAIN,www.directionmico.org, DOMAIN,www.hycoxcable.com, DOMAIN,www.solraise.info, DOMAIN,www.fuzzyfile.net, DOMAIN,www.anoniemvolmacht.com, DOMAIN,www.extrememachine.org, DOMAIN,www.neverforget1984.org, DOMAIN,www.oscarneves.org, DOMAIN,www.worldtourismnews.info, DOMAIN,www.bluecreams.com, DOMAIN,www.denismoble.info, DOMAIN,www.racrage.info, DOMAIN,go0gle.com-serviicelogiin.autthserv.gxongame.info, DOMAIN,WIKIPEDIA-EN.HYCOXCABLE.COM, DOMAIN,SRC-YM.MAILCACHE.INFO, DOMAIN,mcesign.com,http://www.thedomains.com/2013/07/05/feds-seize-46-domain-names-to-celebrate-independence-day/ DOMAIN,166blog.afbjz.com, DOMAIN,afbjz.combbs.afbjz.com, DOMAIN,afekrj.com, DOMAIN,aksq.u7zywp.com, DOMAIN,appleid.apple.com-cgi-bin.webobjects-myappleid.woa-wa-directtosignin.local-en.us, DOMAIN,apply.osaka-u.qocp.net, DOMAIN,bak.foxcom.com.tw, DOMAIN,bak2.foxcom.com.tw, DOMAIN,bak2.stareastnet.com.tw, DOMAIN,byonshop.com, DOMAIN,chcm.earthsolution.org, DOMAIN,cht.stareastnet.com.tw, DOMAIN,comproc.blackberrycluter.com, DOMAIN,crystal.nytimesnews.net, DOMAIN,del.dopodo.com.tw, DOMAIN,dive.welldone123.net, DOMAIN,dns.stareastnet.com.tw, DOMAIN,e3r.info, DOMAIN,education.nytimesnews.net, DOMAIN,eldaedu.us, DOMAIN,epa.yahoodaily.com, DOMAIN,exukw.u7zywp.com, DOMAIN,faq.antivirusbar.org, DOMAIN,feiloglobe.com, DOMAIN,flower-show.org, DOMAIN,flower-show.orgsafebyeak.flower-show.org, DOMAIN,fraumpo.com, DOMAIN,frkojt.u7zywp.com, DOMAIN,fuk.stareastnet.com.tw, DOMAIN,furfeathers.thruthere.net, DOMAIN,game-by.flower-show.org, DOMAIN,gdit.earthsolution.org, DOMAIN,ghvokw.com, DOMAIN,graceland-siu.org, DOMAIN,green.superdogdream.com, DOMAIN,hat.stareastnet.com.tw, DOMAIN,hi.foxcom.com.tw, DOMAIN,home.nytimesnews.net, DOMAIN,hostmaster.aunewsonline.com, DOMAIN,hostmaster.bpyoyo.com, DOMAIN,hostmaster.follow-ship.com, DOMAIN,hostmaster.macsol.org, DOMAIN,hostmaster.searchforca.com, DOMAIN,hostmaster.skyswim.net, DOMAIN,how.siseau.com, DOMAIN,https.stareastnet.com.tw, DOMAIN,itnetdemy.org, DOMAIN,jep.earthsolution.org, DOMAIN,koeny.careerchallenges.net, DOMAIN,kxx.amazingrm.com, DOMAIN,line.stareastnet.com.tw, DOMAIN,lync.dopodo.com.tw, DOMAIN,mail.foxcom.com.tw, DOMAIN,mail.grtk.info, DOMAIN,manageweb.in, DOMAIN,mead.stareastnet.com.tw, DOMAIN,meweb.stareastnet.com.tw, DOMAIN,ns1.mobileappworld.info, DOMAIN,ns1.pharmamkting.eu, DOMAIN,ns1.quicksearchmovie.com, DOMAIN,ns2.mobileappworld.info, DOMAIN,oastrx.com, DOMAIN,pay.nytimesnews.net, DOMAIN,photo.qocp.net, DOMAIN,pop.foxcom.com.tw, DOMAIN,ports3.earthsolution.org, DOMAIN,psactel.com, DOMAIN,ptbak.dopodo.com.tw, DOMAIN,pull.stareastnet.com.tw, DOMAIN,red.renewgis.com, DOMAIN,resource.cnnnewsdaily.com, DOMAIN,sem.stareastnet.com.tw, DOMAIN,seu.centr-info.com, DOMAIN,shifen.stareastnet.com.tw, DOMAIN,supermyadminspanels.info, DOMAIN,support.acers.com.tw, DOMAIN,tech.nytimesnews.net, DOMAIN,tex.foxcom.com.tw, DOMAIN,themmdance.com, DOMAIN,tksrqe.zvco6m.com, DOMAIN,toiletbeam.org, DOMAIN,toyhoping.com, DOMAIN,tport.dopodo.com.tw, DOMAIN,tube.com.analogwiz.org, DOMAIN,uberkoln.net, DOMAIN,uiyaum.com, DOMAIN,unix-dns.net, DOMAIN,us.duamlive.com, DOMAIN,uvfjap.com, DOMAIN,vand.stareastnet.com.tw, DOMAIN,vupdate.mail-kr2.com, DOMAIN,webmail.india-videoer.com, DOMAIN,whatthisdown.com, DOMAIN,winxplenovo.com, DOMAIN,www.chkpoint.info, DOMAIN,www.competitveedge.org, DOMAIN,www.cpbatch.org, DOMAIN,www.crystalrepo.org, DOMAIN,www.follow-ship.com, DOMAIN,www.footwallfanclub.com, DOMAIN,www.ieeei.in, DOMAIN,www.inforguide.org, DOMAIN,www.mail-kr2.com, DOMAIN,www.mailtranet.com, DOMAIN,www.mobileappsupport.com, DOMAIN,www.mysharpens.com, DOMAIN,www.servicesonlinesupportinfo.com, DOMAIN,www.sports-interaction.net, DOMAIN,www.systoolsonline.org, DOMAIN,www.tfxdccssl.net, DOMAIN,www.xmailserv.org, DOMAIN,yahoo.nytimesnews.net, DOMAIN,yahoodaily.biz, DOMAIN,ytins.u7zywp.com, DOMAIN,zytech.acers.com.tw, DOMAIN,zyxel.acers.com.tw, DOMAIN,liveservice.biz,http://pastebin.com/PP1CTtZH DOMAIN,up-date-microsoft.com, DOMAIN,puwedyp.info, DOMAIN,pratioupstudios.org, DOMAIN,skyline2050.net, DOMAIN,www.welldone123.net, DOMAIN,45g5bh.tradingcenter.biz, DOMAIN,alonechoose.net, DOMAIN,androbandrofan001.com, DOMAIN,anf3xnem4.com, DOMAIN,anfj63ms.com, DOMAIN,bak.dopodo.com.tw, DOMAIN,bbfwchxgxxwe.com, DOMAIN,be4appy.com,https://otx.alienvault.com/pulse/56b8a49c4637f20e8bbeb2ce/ DOMAIN,bjecyrtwdrgfydlr.eu, DOMAIN,bqwkwftobguhrvse.eu, DOMAIN,braybrooks.thruthere.net, DOMAIN,bs5629cnaz63n.com, DOMAIN,catalogipdate.com, DOMAIN,cbqoqwghsceshpyc.eu, DOMAIN,cegmmwyyaysqummq.org, DOMAIN,ceyueaeiogooemgq.org, DOMAIN,chiefhowever.net, DOMAIN,cnwkabrnyld1c0.com, DOMAIN,colexserv10.com, DOMAIN,comdnsdomainserv12.com, DOMAIN,criminalcentricem.com, DOMAIN,crysis5.info, DOMAIN,dkgbslfn4.com, DOMAIN,dmakfgetyajfbyjs62.com, DOMAIN,download.contentsaver.net, DOMAIN,dtxnjtg.net, DOMAIN,eiscawcsgiaemsco.org, DOMAIN,fdsbjk5.com, DOMAIN,g4isgskyjk75jgfw1l.com, DOMAIN,gddnuoro.org, DOMAIN,gettingawayz.com, DOMAIN,glowliterock.com, DOMAIN,gmgigoiogeosyawm.org, DOMAIN,gownvjwm.info, DOMAIN,gqfvpiqat1tahtpohc.net, DOMAIN,hewqzmfadwxzdz.org, DOMAIN,hfgfr56745fg.com, DOMAIN,hillreply.net, DOMAIN,histoires-taboues.thruthere.net, DOMAIN,hrdgqqgxprdszjuwqrjdiqk.org, DOMAIN,http.stareastnet.com.tw, DOMAIN,hwumvsr.com, DOMAIN,iosmainstreamvolt.com, DOMAIN,iykujtyrhtfdc.100gbfreehost.com, DOMAIN,jarkijden.com, DOMAIN,jimp.stareastnet.com.tw, DOMAIN,jumpgray.net, DOMAIN,kasperskygay-formula.in, DOMAIN,levezjlcnxhn.net, DOMAIN,lilyjadev2.com, DOMAIN,lkckclckl1i1i.com, DOMAIN,lowercostwellreceived.biz, DOMAIN,lvzyjwj1fakh55i.com,https://asert.arbornetworks.com/an-update-on-the-urlzone-banker/ DOMAIN,malev1ch.com,https://otx.alienvault.com/pulse/56b8a49c4637f20e8bbeb2ce/ DOMAIN,metrcart.com, DOMAIN,mfdclk001.org, DOMAIN,mrwashington.eu,https://otx.alienvault.com/pulse/56b8a49c4637f20e8bbeb2ce/ DOMAIN,msn.catalogipdate.com, DOMAIN,myayquswgwakycug.org, DOMAIN,n0m0retime.com, DOMAIN,newtube350.com, DOMAIN,nmcrlleeuyqsgdq.biz, DOMAIN,no-chance.net, DOMAIN,nopexserv10.com, DOMAIN,nortiniolosto.com, DOMAIN,openwebspace-apo.com, DOMAIN,oxb5mgrx4lmaw7y5p7.biz, DOMAIN,page.dopodo.com.tw, DOMAIN,patr1ckjane.com,https://otx.alienvault.com/pulse/56b8a49c4637f20e8bbeb2ce/ DOMAIN,planpulse.com, DOMAIN,platokoto.com, DOMAIN,pnuomrzanqqbqvkfgc.com, DOMAIN,rado30.com, DOMAIN,rebot2.whatthisdown.com, DOMAIN,salejobsweb123.com, DOMAIN,save-galapagos-turtles.biz, DOMAIN,securesmartconnect.com, DOMAIN,securesmartconnect.net, DOMAIN,sell.dopodo.com.tw, DOMAIN,ser.dopodo.com.tw, DOMAIN,smnknscrakfb28ag3.com, DOMAIN,ytaxprtas.net, DOMAIN,tablefruit.net, DOMAIN,hotinfonews.com,http://securelist.com/analysis/publications/36842/red-october-detailed-malware-description-2-second-stage-of-attack/ DOMAIN,phpmanualbox.com,http://pastebin.com/PP1CTtZH DOMAIN,00zqvqexopeguw2rn.com, DOMAIN,218ct.10dig.net, DOMAIN,adhotspot.biz,http://pastebin.com/PP1CTtZH DOMAIN,anjoman.aikidogroup.com, DOMAIN,confnet.net,http://pastebin.com/PP1CTtZH DOMAIN,infoserv52.com, DOMAIN,lingm.flower-show.org, DOMAIN,member.satelliteclub.info,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,mit.hugesoft.org, DOMAIN,uefbwgtxttxw.com, DOMAIN,www.kasperskygay-formula.in, DOMAIN,stickmarch.net, DOMAIN,*.afbjz.com, DOMAIN,*.blackberrycluter.com, DOMAIN,*.cslisten.com, DOMAIN,*.de.continuelogs.info, DOMAIN,*.dexlab.info, DOMAIN,*.easyslidesharing.net, DOMAIN,*.freshreaders.net, DOMAIN,*.greenhawthorn.com, DOMAIN,*.issnbgkit.net, DOMAIN,*.itechtoys.org, DOMAIN,*.mediaxsds.net, DOMAIN,*.mobilesoftwaremanagement.info, DOMAIN,*.nirvanaol.com, DOMAIN,*.nytimesnews.net, DOMAIN,*.pcclubddk.net, DOMAIN,*.safalife.com, DOMAIN,*.skynet121.net, DOMAIN,*.todayusa.org, DOMAIN,*.travlman.com, DOMAIN,accountsservicelogin.info, DOMAIN,bbs.antivirusbar.org, DOMAIN,behtarinava.com, DOMAIN,cnn.antivirusbar.org, DOMAIN,f00dlover.info,https://github.com/kbandla/APTnotes/blob/master/2013/Unveiling%20an%20Indian%20Cyberattack%20Infrastructure%20-%20appendixes.pdf?raw=true DOMAIN,file.it-bar.net,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,googlereader.pw, DOMAIN,haolemai.cc, DOMAIN,iantoan.com, DOMAIN,jobserver356.org, DOMAIN,microsoft-products.com, DOMAIN,msnw.biz, DOMAIN,mssq1.com, DOMAIN,ncuer.com, DOMAIN,newdfsa.com, DOMAIN,news.hotgreenlight.com, DOMAIN,*.combbs.afbjz.com, DOMAIN,hostmaster.blackberrycluter.com, DOMAIN,kind.anyoffice.info,http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf DOMAIN,ks.antivirusbar.org, DOMAIN,microsoftsp3.com,https://www.fireeye.com/blog/threat-research/2014/09/forced-to-adapt-xslcmd-backdoor-now-on-os-x.html DOMAIN,morming.winxplenovo.com, DOMAIN,bigfixtools.com, DOMAIN,gxbxpv.u7zywp.com, DOMAIN,mdct.u7zywp.com, DOMAIN,msj1212.f1.web665.com, DOMAIN,tukars.today, DOMAIN,googlesec.pw, DOMAIN,appleid.apple.com-cgi-bin.webobjects-myappleid.woa-wa-directtosign-in.local-en.u, DOMAIN,ayfd.info, DOMAIN,hlvg.zn97k.com, DOMAIN,kkle.info, DOMAIN,adsl.2266504.10dig.net, DOMAIN,hy5e.yoa9u.com, DOMAIN,vista.decipherment.net, DOMAIN,cdaepr.u7zywp.com, DOMAIN,cnqb.u7zywp.com, DOMAIN,cvsy.u7zywp.com, DOMAIN,ddmbp.u7zywp.com, DOMAIN,dlpu.u7zywp.com, DOMAIN,dynwyw.u7zywp.com, DOMAIN,googleoffice.in, DOMAIN,hxcv.u7zywp.com, DOMAIN,kiiucv.zvco6m.com, DOMAIN,lnaow.u7zywp.com, DOMAIN,saym.u7zywp.com, DOMAIN,cqyego.u7zywp.com, DOMAIN,ns1.chkpoint.info, DOMAIN,abov.u7zywp.com, DOMAIN,ad-servicestats.net,https://otx.alienvault.com/pulse/54e7650013432a12badec7e7/ DOMAIN,adnmp.u7zywp.com, DOMAIN,aerd.u7zywp.com, DOMAIN,agvx.u7zywp.com, DOMAIN,aisep.u7zywp.com, DOMAIN,aludjk.u7zywp.com, DOMAIN,antransactiona.com, DOMAIN,aol.com.mjtag.org, DOMAIN,armep.u7zywp.com, DOMAIN,arvdmp.u7zywp.com, DOMAIN,aulv.u7zywp.com, DOMAIN,ayuuj.u7zywp.com, DOMAIN,bbirow.u7zywp.com, DOMAIN,bguwy.u7zywp.com, DOMAIN,bhegv.u7zywp.com, DOMAIN,bhwyre.u7zywp.com, DOMAIN,bijlqr.u7zywp.com, DOMAIN,bkjsi.u7zywp.com, DOMAIN,board.eonlineworld.com, DOMAIN,boktuy.u7zywp.com, DOMAIN,bviv.u7zywp.com,