<commit_before># Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blogs.jpcert.or.jp/en/2020/02/malware-lodeinfo-targeting-japan.html
# Reference: https://otx.alienvault.com/pulse/5e5d72a634cc90d8e450455d
# Reference: https://app.any.run/tasks/4a2718d4-f4bd-4f97-80a8-9a40af880530/

http://172.16.58.3
http://192.168.3.11
http://192.168.3.11

# Reference: https://twitter.com/Arkbird_SOLG/status/1263105040643878914
# Reference: https://app.any.run/tasks/90643f1b-1725-4666-afa6-d8934bf31f57/
# Reference: https://www.virustotal.com/gui/file/641d1e752250d27556de774dbb3692d24c4236595ee0e26cc055d4ab5e9cdbe0/detection

http://172.16.31.10

# Reference: https://blogs.jpcert.or.jp/ja/2020/06/LODEINFO-2.html
# Reference: https://otx.alienvault.com/pulse/5ee259d95d533681163d3517

http://192.168.127.12
http://172.16.31.10
http://172.16.31.10
http://172.16.17.32
http://172.16.17.32
http://192.168.3.11
http://192.168.3.11
amebaoor.net

# Reference: https://blogs.jpcert.or.jp/en/2021/02/LODEINFO-3.html
# Reference: https://www.virustotal.com/gui/file/3fda6fd600b4892bda1d28c1835811a139615db41c99a37747954dcccaebff6e/detection

http://172.16.17.32
http://172.16.31.10
http://192.168.3.11
http://172.16.58.3
http://172.16.58.3
evonzae.com

# Reference: https://twitter.com/Metemcyber/status/1555373758709637120
# Reference: https://www.virustotal.com/gui/file/31c87d9a84c7996a56024c93787de9332099faf707cd8d0166e5af9d491977b8/detection

http://192.168.127.12
http://172.16.58.3
http://172.16.58.3
<commit_msg>Update lodeinfo.txt<commit_after># Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blogs.jpcert.or.jp/en/2020/02/malware-lodeinfo-targeting-japan.html
# Reference: https://otx.alienvault.com/pulse/5e5d72a634cc90d8e450455d
# Reference: https://app.any.run/tasks/4a2718d4-f4bd-4f97-80a8-9a40af880530/

http://172.16.58.3
http://192.168.3.11
http://192.168.3.11

# Reference: https://twitter.com/Arkbird_SOLG/status/1263105040643878914
# Reference: https://app.any.run/tasks/90643f1b-1725-4666-afa6-d8934bf31f57/
# Reference: https://www.virustotal.com/gui/file/641d1e752250d27556de774dbb3692d24c4236595ee0e26cc055d4ab5e9cdbe0/detection

http://172.16.31.10

# Reference: https://blogs.jpcert.or.jp/ja/2020/06/LODEINFO-2.html
# Reference: https://otx.alienvault.com/pulse/5ee259d95d533681163d3517

http://192.168.127.12
http://172.16.31.10
http://172.16.31.10
http://172.16.17.32
http://172.16.17.32
http://192.168.3.11
http://192.168.3.11
amebaoor.net

# Reference: https://blogs.jpcert.or.jp/en/2021/02/LODEINFO-3.html
# Reference: https://www.virustotal.com/gui/file/3fda6fd600b4892bda1d28c1835811a139615db41c99a37747954dcccaebff6e/detection

http://172.16.17.32
http://172.16.31.10
http://192.168.3.11
http://172.16.58.3
http://172.16.58.3
evonzae.com

# Reference: https://twitter.com/Metemcyber/status/1555373758709637120
# Reference: https://www.virustotal.com/gui/file/31c87d9a84c7996a56024c93787de9332099faf707cd8d0166e5af9d491977b8/detection

http://192.168.127.12
http://172.16.58.3
http://172.16.58.3

# Reference: https://securelist.com/apt10-tracking-down-lodeinfo-2022-part-i/107742/

http://172.16.31.10
dvdsesso.com/11554.htm

{'fraction_non_alphanumeric': 0.17193087008343266, 'fraction_numerical': 0.2699642431466031, 'mean_word_length': 4.485294117647059, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 27, 'lorem ipsum': 0, 'www.': 6, 'xml': 0}, 'pii_count': 39, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7230024', 'n_tokens_mistral': 2012, 'n_tokens_neox': 1507, 'n_words': 123}