# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/cleafylabs/status/1994332276109271538
# Reference: https://x.com/solostalking/status/1994441692640903466
# Reference: https://www.cleafy.com/cleafy-labs/albiriox-rat-mobile-malware-targeting-global-finance-and-crypto-wallets
# CLASS_0_HASH-HOST=2a672292d30cd24f34127db8be406dce
# FAVICON_HASH-HOST=930331d0dfa633ad63997743a29b7d6b

194.32.79.94:5555
212.11.64.50:5555
69.5.189.206:5555
91.227.41.88:5555
crypto-money24.cash
google-aplication.download
google-app-download.download
google-app-get.com
google-app-install.com
google-get-app.com
google-get-app.download
google-get-download.download
google-get.download
google-get.loan
google-get.org
penny-at.com
penny-at.net
penny-at.org
penny-at.uk
penny-at.win
penny-gift.org
pennywheel-at.com
pennywheel.org
play.google-get.store

# Reference: https://x.com/Fact_Finder03/status/2012403215346651141

http://185.208.156.92
82.146.60.30:443
albiriox.com
albiriox.dev
albiriox.pages.dev
albiriox.su
privacei.com
vanish.exchange
purchase.albiriox.com
