<commit_before># Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: raindrop, solorigate, sunburst, supernova, teardrop, stellarparticle, dark halo

# Reference: https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html
# Reference: https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html
# Reference: https://www.volexity.com/blog/2020/12/14/dark-halo-leverages-solarwinds-compromise-to-breach-organizations/
# Reference: https://unit42.paloaltonetworks.com/fireeye-solarstorm-sunburst/
# Reference: https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/sunburst-supply-chain-attack-solarwinds
# Reference: https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/solarwinds-raindrop-malware
# Reference: https://twitter.com/_CPResearch_/status/1339952318717063168
# Reference: https://otx.alienvault.com/pulse/5fd6df943558e0b56eaf3da8
# Reference: https://otx.alienvault.com/pulse/5fdce61ef056eff2ce0a90de
# Reference: https://otx.alienvault.com/pulse/6007149a5ff246c7c18229c1

avsvmcloud.com
bigtopweb.com
databasegalore.com
deftsecurity.com
digitalcollege.org
ervsystem.com
freescanonline.com
globalnetworkissues.com
highdatabase.com
incomeupdate.com
infinitysoftwares.com
kubecloud.com
lcomputers.com
panhardware.com
seobundlekit.com
solartrackingsystem.net
thedoccloud.com
virtualdataserver.com
virtualwebdata.com
webcodez.com
websitetheme.com
zupertech.com
appsync-api.eu-west-1.avsvmcloud.com
appsync-api.us-east-1.avsvmcloud.com
appsync-api.us-east-2.avsvmcloud.com
appsync-api.us-west-2.avsvmcloud.com
6a57jk2ba1d9keg15cbg.appsync-api.eu-west-1.avsvmcloud.com
7sbvaemscs0mc925tb99.appsync-api.us-west-2.avsvmcloud.com
gq1h856599gqh538acqn.appsync-api.us-west-2.avsvmcloud.com
ihvpgv9psvq02ffo77et.appsync-api.us-east-2.avsvmcloud.com
k5kcubuassl3alrf7gm3.appsync-api.eu-west-1.avsvmcloud.com
mhdosoksaccf9sni9icp.appsync-api.eu-west-1.avsvmcloud.com<commit_msg>Update apt_unc2452.txt<commit_after># Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: raindrop, solorigate, sunburst, supernova, teardrop, stellarparticle, dark halo

# Reference: https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html
# Reference: https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html
# Reference: https://www.volexity.com/blog/2020/12/14/dark-halo-leverages-solarwinds-compromise-to-breach-organizations/
# Reference: https://unit42.paloaltonetworks.com/fireeye-solarstorm-sunburst/
# Reference: https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/sunburst-supply-chain-attack-solarwinds
# Reference: https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/solarwinds-raindrop-malware
# Reference: https://twitter.com/_CPResearch_/status/1339952318717063168
# Reference: https://otx.alienvault.com/pulse/5fd6df943558e0b56eaf3da8
# Reference: https://otx.alienvault.com/pulse/5fdce61ef056eff2ce0a90de
# Reference: https://otx.alienvault.com/pulse/6007149a5ff246c7c18229c1

avsvmcloud.com
bigtopweb.com
databasegalore.com
deftsecurity.com
digitalcollege.org
ervsystem.com
freescanonline.com
globalnetworkissues.com
highdatabase.com
incomeupdate.com
infinitysoftwares.com
kubecloud.com
lcomputers.com
panhardware.com
seobundlekit.com
solartrackingsystem.net
thedoccloud.com
virtualdataserver.com
virtualwebdata.com
webcodez.com
websitetheme.com
zupertech.com
appsync-api.eu-west-1.avsvmcloud.com
appsync-api.us-east-1.avsvmcloud.com
appsync-api.us-east-2.avsvmcloud.com
appsync-api.us-west-2.avsvmcloud.com
6a57jk2ba1d9keg15cbg.appsync-api.eu-west-1.avsvmcloud.com
7sbvaemscs0mc925tb99.appsync-api.us-west-2.avsvmcloud.com
gq1h856599gqh538acqn.appsync-api.us-west-2.avsvmcloud.com
ihvpgv9psvq02ffo77et.appsync-api.us-east-2.avsvmcloud.com
k5kcubuassl3alrf7gm3.appsync-api.eu-west-1.avsvmcloud.com
mhdosoksaccf9sni9icp.appsync-api.eu-west-1.avsvmcloud.com

# Reference: https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/
# Reference: https://otx.alienvault.com/pulse/60088b53da5e673bc2825ce8

aimsecurity.net
datazr.com
financialmarket.org
gallerycenter.org
mobilnweb.com
olapdatabase.com
swipeservice.com
techiefly.com
{'fraction_non_alphanumeric': 0.11886586695747, 'fraction_numerical': 0.06543075245365322, 'mean_word_length': 6.2220472440944885, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 24, 'lorem ipsum': 0, 'www.': 5, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3208671', 'n_tokens_mistral': 2024, 'n_tokens_neox': 1817, 'n_words': 162}