# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: blaze stealer, nebula stealer

# Reference: https://twitter.com/ULTRAFRAUD/status/1709671989567267050
# Reference: https://www.virustotal.com/gui/file/41ca86577525fb72e622e702f3a4839d7802b7412f12a3024fd2f4d9508bde63/detection

blazest4ler.000webhostapp.com

# Reference: https://x.com/01Xyris/status/1957404143439474800

http://139.177.200.47
http://85.215.240.118
blazestealer.es

# Reference: https://x.com/suyog41/status/1887853286642073794
# Reference: https://app.validin.com/detail?find=Nebula%20%7C%20Control%20Panel&type=raw&ref_id=a3f0a63a5a6#tab=host_pairs
# Reference: https://www.virustotal.com/gui/file/bc65ffb0e321c91eda2f4cee97f3975eea82400991eb7a7b6d745d5800290bf2/detection

http://149.56.76.26
duds.bet
huzz.wtf
casadedeus.hulf.com.br

# Reference: https://x.com/solostalking/status/2011060085129421184

85.215.240.118:3000
n3bulast34l3r.es

# Generic

/BlazeStealer.exe
/BlazeStealer.zip
