<commit_before># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.malwarebytes.com/threat-analysis/2019/05/hidden-bee-lets-go-down-the-rabbit-hole/
# Reference: https://www.virustotal.com/gui/file/fd9edb6d9ac9674e797e51b3767e45a2eb23343c2ce88e64ef20d26f641064af/behavior/VirusTotal%20Cuckoofork

favcom.space
onetouchauthentication.club
192.168.3.11:9000
172.16.31.10:1108
172.16.31.10:443

# Reference: https://twitter.com/adrian__luca/status/1151393084380459009
# Reference: https://app.any.run/tasks/61147c70-2def-4d72-aa32-4b1e45da1180/

192.168.3.11:9088

# Reference: https://blog.malwarebytes.com/threat-analysis/2019/08/the-hidden-bee-infection-chain-part-1-the-stegano-pack/

howtocom.site

# Reference: https://app.any.run/tasks/f6e34b80-b1eb-4941-8ca6-7332ac0b07dd/

172.16.58.3:1108
192.168.3.11:13782
fastssl.xyz
gotocom.xyz
topvipsr.xyz<commit_msg>Update hiddenbee.txt<commit_after># Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.malwarebytes.com/threat-analysis/2019/05/hidden-bee-lets-go-down-the-rabbit-hole/
# Reference: https://www.virustotal.com/gui/file/fd9edb6d9ac9674e797e51b3767e45a2eb23343c2ce88e64ef20d26f641064af/behavior/VirusTotal%20Cuckoofork

favcom.space
onetouchauthentication.club
192.168.3.11:9000
172.16.31.10:1108
172.16.31.10:443

# Reference: https://twitter.com/adrian__luca/status/1151393084380459009
# Reference: https://app.any.run/tasks/61147c70-2def-4d72-aa32-4b1e45da1180/

192.168.3.11:9088

# Reference: https://blog.malwarebytes.com/threat-analysis/2019/08/the-hidden-bee-infection-chain-part-1-the-stegano-pack/

howtocom.site

# Reference: https://app.any.run/tasks/f6e34b80-b1eb-4941-8ca6-7332ac0b07dd/

172.16.58.3:1108
192.168.3.11:13782
fastssl.xyz
gotocom.xyz
topvipsr.xyz

# Reference: https://www.virustotal.com/gui/file/72711675c477df6dee71b56c8d626c6784d154183c4548171c8b9d3d22bc0a50/detection

172.16.17.32:9000
172.16.58.3:13782
172.16.17.32:1108
topvipdg.me

# Reference: https://www.virustotal.com/gui/file/02f73b8ba952204c1053c062490a7c0b97c3d8405be00c4c5024cfdbe9b52bcb/detection

172.16.17.32:13782
172.16.17.32:1108
172.16.31.10:9000
{'fraction_non_alphanumeric': 0.14199655765920827, 'fraction_numerical': 0.24096385542168675, 'mean_word_length': 5.335149863760218, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 16, 'lorem ipsum': 0, 'www.': 4, 'xml': 0}, 'pii_count': 18, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5432376', 'n_tokens_mistral': 1338, 'n_tokens_neox': 1018, 'n_words': 87}