<commit_before># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://github.com/advanced-threat-research/IOCs/blob/master/2014/2014-08-02-sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing/sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing.csv

waddb.sr

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2014-110720-2146-99&tabid=2

adamat.ddns.net
supervisor.ntdll.net
antony989.ddns.net

# Reference: https://www.virustotal.com/gui/file/103315ba910445f657e3545e3b798d73ee89fe60674288d1909458d46187fee4/detection

172.16.31.10:15822

# Reference: https://www.virustotal.com/gui/file/9737c40636aa34ed6e166924c19b4e2223ea6f6b03823911274c437f8fea8fcf/detection

Wirusw-44803.portmap.host

# Reference: https://www.virustotal.com/gui/file/eccdb9b04cf79e386f19c112d14dd99d100af826557483788ceabd9fb2b7cc95/detection

172.16.58.3:29926<commit_msg>Update android_sandrorat.txt<commit_after># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://github.com/advanced-threat-research/IOCs/blob/master/2014/2014-08-02-sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing/sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing.csv

waddb.sr

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2014-110720-2146-99&tabid=2

adamat.ddns.net
supervisor.ntdll.net
antony989.ddns.net

# Reference: https://www.virustotal.com/gui/file/103315ba910445f657e3545e3b798d73ee89fe60674288d1909458d46187fee4/detection

172.16.31.10:15822

# Reference: https://www.virustotal.com/gui/file/9737c40636aa34ed6e166924c19b4e2223ea6f6b03823911274c437f8fea8fcf/detection

Wirusw-44803.portmap.host

# Reference: https://www.virustotal.com/gui/file/eccdb9b04cf79e386f19c112d14dd99d100af826557483788ceabd9fb2b7cc95/detection

172.16.58.3:29926

# Reference: https://www.virustotal.com/gui/file/adc705d49406b238e55202bfa3755421be7af82a8ac935a486d23e913c9a1a7c/detection

172.16.58.3:28020
{'fraction_non_alphanumeric': 0.12276683463124141, 'fraction_numerical': 0.20797068254695372, 'mean_word_length': 6.328859060402684, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 13, 'lorem ipsum': 0, 'www.': 9, 'xml': 0}, 'pii_count': 5, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4219277', 'n_tokens_mistral': 1187, 'n_tokens_neox': 919, 'n_words': 65}