-
Notifications
You must be signed in to change notification settings - Fork 6
/
twinclams.hdb
165 lines (165 loc) · 19.7 KB
/
twinclams.hdb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
######https://youtu.be/gAPIJpzAVqA?t=182
# Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-335a
f1103e627311e73d5f29e877243e7ca203292f9419303c661aec57745eb4f26c:*:TwinWave.HKillRoomService.CubaRansom_09062023_853:73
a7c207b9b83648f69d6387780b1168e2f1eabd23ae6e162dd700ae8112f8b96c:*:TwinWave.HKillRoomService.CubaRansom_09062023_854:73
02a733920c7e69469164316e3e96850d55fca9f5f9d19a241fad906466ec8ae8:*:TwinWave.HKillRoomService.CubaRansom_09062023_856:73
0cf6399db55d40bc790a399c6bbded375f5a278dc57a143e4b21ea3f402f551f:*:TwinWave.HKillRoomService.CubaRansom_09062023_857:73
f5db51115fa0c910262828d0943171d640b4748e51c9a140d06ea81ae6ea1710:*:TwinWave.HKillRoomService.CubaRansom_09062023_858:73
857f28b8fe31cf5db6d45d909547b151a66532951f26cda5f3320d2d4461b583:*:TwinWave.HKillRoomService.CubaRansom_09062023_859:73
08eb4366fc0722696edb03981f00778701266a2e57c40cd2e9d765bf8b0a34d0:*:TwinWave.HKillRoomService.CubaRansom_09062023_860:73
f8144fa96c036a8204c7bc285e295f9cd2d1deb0379e39ee8a8414531104dc4a:*:TwinWave.HKillRoomService.CubaRansom_09062023_861:73
88d13669a994d2e04ec0a9940f07ab8aab8563eb845a9c13f2b0fec497df5b17:*:TwinWave.HKillRoomService.CubaRansom_09062023_862:73
0f385cc69a93abeaf84994e7887cb173e889d309a515b55b2205805bdfe468a3:*:TwinWave.HKillRoomService.CubaRansom_09062023_863:73
0d5e3483299242bf504bd3780487f66f2ec4f48a7b38baa6c6bc8ba16e4fb605:*:TwinWave.HKillRoomService.CubaRansom_09062023_864:73
7e00bfb622072f53733074795ab581cf6d1a8b4fc269a50919dda6350209913c:*:TwinWave.HKillRoomService.CubaRansom_09062023_865:73
af4523186fe4a5e2833bbbe14939d8c3bd352a47a2f77592d8adcb569621ce02:*:TwinWave.HKillRoomService.CubaRansom_09062023_866:73
8a3d71c668574ad6e7406d3227ba5adc5a230dd3057edddc4d0ec5f8134d76c3:*:TwinWave.HKillRoomService.CubaRansom_09062023_867:73
4306c5d152cdd86f3506f91633ef3ae7d8cf0dd25f3e37bec43423c4742f4c42:*:TwinWave.HKillRoomService.CubaRansom_09062023_868:73
3d4502066a338e19df58aa4936c37427feecce9ab8d43abff4a7367643ae39ce:*:TwinWave.HKillRoomService.CubaRansom_09062023_869:73
f538b035c3de87f9f8294bec272c1182f90832a4e86db1e47cbb1ab26c9f3a0b:*:TwinWave.HKillRoomService.CubaRansom_09062023_870:73
fd87ca28899823b37b2c239fbbd236c555bcab7768d67203f86d37ede19dd975:*:TwinWave.HKillRoomService.CubaRansom_09062023_871:73
1817cc163482eb21308adbd43fb6be57fcb5ff11fd74b344469190bb48d8163b:*:TwinWave.HKillRoomService.CubaRansom_09062023_872:73
bff4dd37febd5465e0091d9ea68006be475c0191bd8c7a79a44fbf4b99544ef1:*:TwinWave.HKillRoomService.CubaRansom_09062023_873:73
ecefd9bb8b3783a81ab934b44eb3d84df5e58f0289f089ef6760264352cf878a:*:TwinWave.HKillRoomService.CubaRansom_09062023_874:73
db3b1f224aec1a7c58946d819d729d0903751d1867113aae5cca87e38c653cf4:*:TwinWave.HKillRoomService.CubaRansom_09062023_875:73
74fbf3cc44dd070bd5cb87ca2eed03e1bbeec4fec644a25621052f0a73abbe84:*:TwinWave.HKillRoomService.CubaRansom_09062023_876:73
b160bd46b6efc6d79bfb76cf3eeacca2300050248969decba139e9e1cbeebf53:*:TwinWave.HKillRoomService.CubaRansom_09062023_877:73
f869e8fbd8aa1f037ad862cf6e8bbbf797ff49556fb100f2197be4ee196a89ae:*:TwinWave.HKillRoomService.CubaRansom_09062023_878:73
0c2ffed470e954d2bf22807ba52c1ffd1ecce15779c0afdf15c292e3444cf674:*:TwinWave.HKillRoomService.CubaRansom_09062023_879:73
310afba59ab8e1bda3ef750a64bf39133e15c89e8c7cf4ac65ee463b26b136ba:*:TwinWave.HKillRoomService.CubaRansom_09062023_880:73
b5d202456ac2ce7d1285b9c0e2e5b7ddc03da1cbca51b5da98d9ad72e7f773b8:*:TwinWave.HKillRoomService.CubaRansom_09062023_881:73
1f842f84750048bb44843c277edeaa8469697e97c4dbf8dc571ec552266bec9f:*:TwinWave.HKillRoomService.CubaRansom_09062023_882:73
1b943afac4f476d523310b8e3afe7bca761b8cbaa9ea2b9f01237ca4652fc834:*:TwinWave.HKillRoomService.CubaRansom_09062023_883:73
B9AFE016DBDBA389000B01CE7645E7EEA1B0A50827CDED1CBAA48FBC715197BB:*:TwinWave.HKillRoomService.CubaRansom_09062023_884:73
61971d3cbf88d6658e5209de443e212100afc8f033057d9a4e79000f6f0f7cc4:*:TwinWave.HKillRoomService.CubaRansom_09062023_885:73
8E64BACAF40110547B334EADCB0792BDC891D7AE298FBFFF1367125797B6036B:*:TwinWave.HKillRoomService.CubaRansom_09062023_886:73
c646199a9799b6158de419b1b7e36b46c7b7413d6c35bfffaeaa8700b2dcc427:*:TwinWave.HKillRoomService.CubaRansom_09062023_887:73
bd270853db17f94c2b8e4bd9fa089756a147ed45cbc44d6c2b0c78f361978906:*:TwinWave.HKillRoomService.CubaRansom_09062023_888:73
2EB3EF8A7A2C498E87F3820510752043B20CBE35B0CBD9AF3F69E8B8FE482676:*:TwinWave.HKillRoomService.CubaRansom_09062023_889:73
0afed8d1b7c36008de188c20d7f0e2283251a174261547aab7fb56e31d767666:*:TwinWave.HKillRoomService.CubaRansom_09062023_890:73
e0d89c88378dcb1b6c9ce2d2820f8d773613402998b8dcdb024858010dec72ed:*:TwinWave.HKillRoomService.CubaRansom_09062023_891:73
571f8db67d463ae80098edc7a1a0cad59153ce6592e42d370a45df46f18a4ad8:*:TwinWave.HKillRoomService.CubaRansom_09062023_892:73
10a5612044599128981cb41d71d7390c15e7a2a0c2848ad751c3da1cbec510a2:*:TwinWave.HKillRoomService.CubaRansom_09062023_893:73
1807549af1c8fdc5b04c564f4026e41790c554f339514d326f8b55cb7b9b4f79:*:TwinWave.HKillRoomService.CubaRansom_09062023_894:73
01242b35b6def71e42cc985e97d618e2fabd616b16d23f7081d575364d09ca74:*:TwinWave.HKillRoomService.CubaRansom_09062023_895:73
952b34f6370294c5a0bb122febfaa80612fef1f32eddd48a3d0556c4286b7474:*:TwinWave.HKillRoomService.CubaRansom_09062023_896:73
9aa1f37517458d635eae4f9b43cb4770880ea0ee171e7e4ad155bbdee0cbe732:*:TwinWave.HKillRoomService.CubaRansom_09062023_897:73
3a8b7c1fe9bd9451c0a51e4122605efc98e7e4e13ed117139a13e4749e211ed0:*:TwinWave.HKillRoomService.CubaRansom_09062023_898:73
551224b64adf039d7568f3a67e4d74f9a27ee358bd0e44d9f0d66b4d96588202:*:TwinWave.HKillRoomService.VLCSideLoad_09112023_658:73
f77971b5d75d97a322a2c2a4a3fd3269c4a32388c8ad7ae80b7dcc7cefe321d6:*:TwinWave.HKillRoomService.VLCSideLoad_09112023_659:73
#https://x.com/DonPasci/status/1701342307658670209?s=20
be69add1213202bc7a038a2cfb2cf8ece07eeaaf163c2e17873c54d303e3abfa:*:TwinWave.HKillRoomService.FakePutty_09122023_129:73
a9ee4f3dcb9ae9ef57d9677a899d5f1c011dcb17275e95baf87a869f4f3dadeb:*:TwinWave.HKillRoomService.FakePutty_09122023_130:73
aa7a19bd36e65056815f4a2279f99823080530fa9f8cdc8c5128eea4d5409992:*:TwinWave.HkillRoomService.FakeWhatsApp_09182023_130:73
# Source: https://www.malwarebytes.com/blog/threat-intelligence/2023/09/ongoing-webex-malvertising-drops-batloader
2727a418f31e8c0841f8c3e79455067798a1c11c2b83b5c74d2de4fb3476b654:*:TwinWave.HkillRoomService.FakeWebExBatLoader_09182023_829:73
7a1245584c0a12186aa7228c75a319ca7f57e7b0db55c1bd9b8d7f9b397bfac8:*:TwinWave.HkillRoomService.FakeWebeXDanaBot_09182023_995:73
# Source: https://unit42.paloaltonetworks.com/stately-taurus-attacks-se-asian-government/
4a8b7cfb2e33aa079ba51166591c7a210ad8b3c7c7f242fccf8cb2e71e8e40d5:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_105:73
12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_106:73
6868f5ce836034557e05c7ddea006a91d6fc59de7e235c9b08787bd6dbd2b837:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_107:73
541bac89b3a414e06b45d778f86b245675922e8b11f866c8b6a827c5d418e598:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_108:73
8445aa54adf4d666e65084909a7b989a190ec6eca2844546c2e99a8cfb832fad:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_109:73
b000a0095a8fda38227103f253b6d79134b862a83df50315d7d9c5b537fd994b:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_110:73
64ab1c1b19682026900d060b969ab3c3ab860988733b7e7bf3ba78a4ea0340b9:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_111:73
31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_112:73
2254e3242943c0afe038baeafe8381bbff136e6d8f681f0f446bf0e458900643:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_113:73
2f5cf595ac4d6a59be78a781c5ba126c2ff6d6e5956dc0a7602e6ba8e6665694:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_114:73
0f2f0458d2f1ac4233883e96fe1f4cc6db1551cdcfdd49c43311429af03a1cd5:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_115:73
011fe9974f07cb12ba30e69e7a84e5cb489ce14a81bced59a11031fc0c3681b7:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_116:73
3fc4d023d96f339945683f6dc7d9e19a9a62b901bef6dc26c5918ce9508be273:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_117:73
3a429b8457ad611b7c3528e4b41e8923dd2aee32ccd2cc5cf5ff83e69c1253c2:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_118:73
f58d3d376c8e26b4ae3c2bbaa4ae76ca183f32823276e6432a945bcbc63266d9:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_119:73
46c6ee9195f3bd30f51eb6611623aad1ba17f5e0cde0b5523ab51e0c5b641dbf:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_120:73
86140e6770fbd0cc6988f025d52bb4f59c0d78213c75451b42c9f812fe1a9354:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_121:73
a08e0d1839b86d0d56a52d07123719211a3c3d43a6aa05aa34531a72ed1207dc:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_122:73
19d07dbc58b8e076cafd98c25cae5d7ac6f007db1c8ec0fae4ce6c7254b8f073:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_123:73
8e801d3a36decc5e4ce6fd3e8e45b098966aef8cbe7535ed0a789575775a68b6:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_124:73
df4ba449f30f3ed31a344931dc77233b27e06623355ece23855ee4fe8a75c267:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_125:73
345ef3fb73aa75538fdcf780d2136642755a9f20dbd22d93bee26e93fb6ab8fd:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_126:73
3a5e69786ac1c458e27d38a966425abb6fb493a41110393a4878c811557a3b5b:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_127:73
66b7983831cbb952ceeb1ffff608880f1805f1df0b062cef4c17b258b7f478ce:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_128:73
f2a6a326fb8937bbc32868965f7475f4af0f42f3792e80156cc57108fc09c034:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_129:73
dafa952aacf18beeb1ebf47620589639223a2e99fb2fa5ce2de1e7ef7a56caa0:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_130:73
52cd066f498a66823107aed7eaa4635eee6b7914acded926864f1aae59571991:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_131:73
8129bd45466c2676b248c08bb0efcd9ccc8b684abf3435e290fcf4739c0a439f:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_132:73
1874b20e3e802406c594341699c5863a2c07c4c79cf762888ee28142af83547f:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_133:73
3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71:*:TwinWave.HKillRoomServiceStateleyTaurusTksPan_09252023_134:73
# Source: https://unit42.paloaltonetworks.com/rare-possible-gelsemium-attack-targets-se-asia/
24eb9c77448dda2d7cfecc60c804a378e89cbd450fbf7f4db875eb131cd4510a:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_483:73
4dcdce3fd7f0ab80bc34b924ecaa640165ee49aa1a22179b3f580b2f74705dd9:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_484:73
96bc4853d5a0c976fb7a02d747cd268fb2dfc8c2361d68bb4ffcc16adec5ea19:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_485:73
ac115bfa8d36cf31046b8ccce30e9ebcede899395d56400955f95e242d5c9c75:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_486:73
17392669a04f17fda068d18ae5850d135f3912d08b4e2eee81fce915849887b3:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_487:73
3be95477e1d9f3877b4355cff3fbcdd3589bb7f6349fd4ba6451e1e9d32b7fa6:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_488:73
181feef51991b162bdff5d49bb7fd368d9ec2b535475b88bc197d70d73eef886:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_489:73
61de79db5ed022ee9376e86a2094a51cf3b31fa6bce126cbcdacad33469c752f:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_490:73
c7bd78b9a68198b8787d28ba5094827eb99a0798719bcb140f3afb695925566c:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_491:73
fd0b9f09770685ed6f40ecabcd31bc467fa22801164b52fdc638334009b7c06f:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_492:73
77e82c3d5fea369f6598339dcd97b73f670ff0ad373bf7fc3a2d8586f58d9d32:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_493:73
f0761ad307781bdf8da94765abd1a2041ac12a52c7fdde85f00b2b2cab6d6ce8:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_494:73
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_495:73
3268f269371a81dbdce8c4eedffd8817c1ec2eadec9ba4ab043cb779c2f8a5d2:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_496:73
527063cb9da5eec2e4b290019eaac5edd47ff3807fec74efa0f1b7ddf5a1b271:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_497:73
2f3abc59739b248ee26a575700eef93b18bd2029eb9f8123598ffdd81fa54d8b:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_498:73
b9a9e43e3d10cf6b5548b8be78e01dc0a034955b149a20e212a79a2cf7bee956:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_499:73
ff7485d30279f78aba29326d9150b8c302294351e716ece77f4a3b890008e5fe:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_500:73
c0a7a797f39b509fd2d895b5731e79b57b350b85b20be5a51c0a1bda19321bd0:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_501:73
c254dc53b3cf9c7d81d92f4e060a5c44a4f51a228049fd1e2d90fafa9c0a44ee:*:TwinWave.HKillRoomService.GelsemiumTksPAN_09252023_502:73
# Source: https://go.recordedfuture.com/hubfs/reports/cta-2023-0919.pdf
01e5ebc2c096d465800660a0ad6d62208a5b2b675e3700f3734fac225b1d38bd:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_758:73
11cd4b64dcac3195c01ffc937ae1eb77aa2f98d560a75347036d54a1cf69a5fd:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_759:73
a88ca28b0948e810d4eb519db7b72a40cfe7907ce4c6a881a192880278f3c8b5:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_760:73
89f250599e09f8631040e73cd9ea5e515d87e3d1d989f484686893becec1a9bc:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_761:73
0ea0b19c562d20c6ac89a1f2db06eedcb147cde2281e79bb0497cef62094b514:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_762:73
aa4ad5341a9258330abd732cbab3721d76764f1ff21a8f960622661d701a1a71:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_763:73
8f50f49e77ddcc7ef639a76217b2eb25c48f9ce21ae8341050d0da49b89b7b34:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_764:73
ae0f641dc9d33ee50990971104ef1c598e216693700be6b74bb1e9ef373af97c:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_765:73
465c7c6a0f23ba5f928fc0d0cdc4d9f6ec89e03dcedafc3d72b3b3c01a54a00c:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_766:73
6a59421fd225d90439b6a933458718cf43dbe518c63979e8980bc070c070558a:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_767:73
df7d584d56af6fcf3cca31ed0d3a4d34abd2c1019b8d223a230f8a78075a7d9a:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_768:73
078a8026f32b8d05258285dc527408388c651f6c3eaebc45f8bb3f4b42248631:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_769:73
c643598b4ee0e9b3b70dae19437bbec01e881a1ad3b2ec1f6f5c335e552e5d6e:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_770:73
9425666e58b200306935c36301d66a4bf2c831ad41ea0ee8984f056257b86eb6:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_771:73
a16997954b64499479b4721c9f742b5d2875496f2035e1c654b06694981041b2:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_772:73
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_773:73
0ea02fddf2ec96d4aee8adaffda2dd5fab0ea989b0c3f8c1577a1be22ee9153a:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_774:73
e3cdaa9bfba6bfac616b7f275c1e888b8910efcb8a3df071f68ad1e83710bd61:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_775:73
9fdb528949a2b80ac40cb7d3333bdff5d504294cc3d90cf353db72b8beffd2b2:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_776:73
607f324c3427916d67369e40af72aa441f3ca7be1e0ec6c53c3558fc7a1c4186:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_777:73
8efc5db8c678bdf27dacbf033842c2ef676c979afdc4561cb8d315d2d488491f:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_778:73
beb09817608daba003589292a6cca2f724c52f756df2ef0e230380345d702716:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_779:73
ba07ee6409908384172511563e6b9059cf84121fcb42c54d45c76ec67cb36d7c:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_780:73
bf1d1f5157756529d650719cc531ec2de94edb66ae1dabd00ed6f4b90a336d9c:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_781:73
2dd7c9ea32f5b2a4d431fc54aa68cd76837f80bb324ef2e4e1e5134e467e35af:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_782:73
56c9235e55b1a6371762159619e949686d8de2b45a348aeb4fd5bed6a126f66a:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_783:73
dda47ba7a41c9a2f041cc10f9b058a78e0019315c51cc98d0f356e2054209ae5:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_784:73
cf5bbbcb3f4d5123c08635c8fd398e55e516893b902a33cd6f478e8797eea962:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_785:73
b3a8ea3b501b9b721f6e371dd57025dc14d117c29ce8ee955b240d4a17bc2127:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_786:73
9d10de1c3c435927d07a1280390faf82c5d7d5465d772f6e1206751400072261:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_787:73
0eea610ec0949dc602a7178f25f316c4db654301e7389ee414c9826783fd64c0:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_788:73
8073593a7311bc23f971352c85ce2034c01d3d3fbbe4f99a8f3825292e8f9f77:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_789:73
e1748e7e668d6fc7772e95c08d32f41ad340f4a9acf0e2f933f3cbeba7323afa:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_790:73
0d6893c7a3a7afc60b81c136b1dcdfb24b35efab01aac165fe0083b9b981da7c:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_791:73
77fbb82690c9256f18544e26bb6e306a3f878d3e9ab5966457ac39631dfd2cb0:*:TwinWave.HKillRoomService.TAG74TKSRF_09262023_792:73
# Source: https://perception-point.io/blog/stealing-more-than-towels-the-new-infostealer-campaign-hitting-hotels-and-travel-agencies/
7083e4774a68e23dd2f9239e5108f6615ff945a0673e7e975ab2ca2d4cb297d3:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_617:73
5365eb23e9dc4d3dc3c4eceae3266cbe586119c706c92c9a9902d7252ec73f83:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_618:73
9d1357bd8dab703f05ccac6bb5d3795a8ba5e5448e9b1dc7a7babef322d0fb98:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_619:73
5780ed8b0d40ad27404f10cd789f6b9e6bf58d78a046ad51a6bd9bb7c596989a:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_620:73
1a2e3bcc76ecc493d27592455fb947b5087d5a7497c317c59bca8b2b1b3223b8:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_621:73
762319e1763b8562091216c4d5ffa61f6045a982690d0e357b666d22ce439c82:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_622:73
0345b46e9e6785955bd4c6c1942a0e03d2403c77625b5124e5b73791c6b89034:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_623:73
b1cfc4b89b560fc11be26a216162162ceaace507b697954633d3229e34c4b178:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_624:73
c8ad5b16a404af9d88ba5b0caf01c08272659a07c2b8281da5e012f7f9e33a49:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_625:73
81dacd747676798317aab35e377aa0b368b708ba9369dcf26f971e6011b12610:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_626:73
fbfd2477b5502947fe25d5e434782f5cbe31ed479954d7b72379260d83a4252d:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_627:73
dc8cfd8478b22828a848f43b5d3c6582f94da8fe6ce0a2fa29dee575951fc945:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_628:73
b63d41c60aa52cae9806a4fe233d9a55b0c2dfdc67f215ab66c660503cc1a5f3:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_629:73
5196d0ce3bdb5504cfedd615c220d15cbd69315192348cae3b610ae15629c1bc:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_630:73
D5eb3924a89990cb0e7583376c02d9e1edcc3919e0a46b1c44be7c91f28fef0c:*:TwinWave.HKillRoomService.StolenTowelsTksPerceptionPoint_09272023_631:73
# Source: https://nsfocusglobal.com/warning-newly-discovered-apt-attacker-atlascross-exploits-red-cross-blood-drive-phishing-for-cyberattack/
7195d7e4926a0a85fbe81e40ab7c0ca4:*:TwinWave.HKillRoomService.AtlasAgent.TksNfocus_09282023_657:73
f8bafe2ce6f11a32109abbab1c42e2cf:*:TwinWave.HKillRoomService.AtlasAgent.TksNfocus_09282023_658:73
ca48431273dfcd2bd025e55f2de30635:*:TwinWave.HKillRoomService.AtlasAgent.TksNfocus_09282023_659:73
ba85467ceff628be8b4f0e2da2a5990c:*:TwinWave.HKillRoomService.AtlasAgent.TksNfocus_09282023_660:73